Prototype Pollution

2023-03-2812:03:02

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

prototype pollution

extend function

injection

malicious property

EPSS

0.003

Percentile

69.1%

JSON

collection.js is vulnerable to Prototype Pollution. The vulnerability exists due lack of sanization in the extend function of extend.js which allows an attacker to inject malicious property’s such as __proto__, resulting in prototype pollution.