Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40313
HistoryApr 27, 2023 - 11:25 a.m.

Prototype Pollution

2023-04-2711:25:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
prototype pollution
input validation
malicious injection
software vulnerability

0.001 Low

EPSS

Percentile

23.6%

xlsx is vulnerable to Prototype Pollution. The vulnerability exists due to the lack of checks for user inputed specially crafted files, which allows an attacker to inject malicious properties, resulting in prototype pollution.

CPENameOperatorVersion
xlsxle0.18.5
xlsxle0.18.5
xlsxle0.18.5
xlsxle0.18.5

0.001 Low

EPSS

Percentile

23.6%