Prototype Pollution

2022-12-2205:23:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

dustjs-linkedin

vulnerability

prototype pollution

javascript

application object

EPSS

0.008

Percentile

81.5%

JSON

dustjs-linkedin is vulnerable to prototype pollution. The vulnerability exists because prototype attributes are not properly validated which allows an attacker to inject malicious characteristics to add new properties to a JavaScript application object prototype, overwriting or contaminating the base object.