Lucene search
Veracode Vulnerability DatabaseVERACODE:38537HistoryDec 20, 2022 - 5:39 a.m.
Prototype Pollution
2022-12-2005:39:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
prototype pollution
vulnerability
index.js
lookup function
object prototype
attacker
modification
0.001 Low
EPSS
Percentile
51.0%
whois is vulnerable to prototype pollution. The vulnerability exists in the lookup function of index.js via the addr variable which allows an attacker to modify object prototype attributes, resulting in prototype pollution.
Related
cvelist
cvelist
CVE-2020-36618 Furqan node-whois index.coffee prototype pollution
2022-12-19 00:00:00
cve
cve
CVE-2020-36618
2022-12-19 14:15:10
osv
osv
CVE-2020-36618
2022-12-19 14:15:10
FurqanSoftware/node-whois vulnerable to Prototype Pollution
2022-12-19 15:30:29
github
github
FurqanSoftware/node-whois vulnerable to Prototype Pollution
2022-12-19 15:30:29
nvd
nvd
CVE-2020-36618
2022-12-19 14:15:10
prion
prion
Design/Logic Flaw
2022-12-19 14:15:00