Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47589
HistoryJun 18, 2024 - 6:16 a.m.

Prototype Pollution

2024-06-1806:16:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
prototype pollution
unflattenjson
attacker
vulnerability
malicious payloads

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

@allanlancioni/flatten-json is vulnerable to Prototype Pollution. The vulnerability is due to the unflattenJSON method, allowing attackers to exploit properties such as __proto__ or constructor.prototype to inject malicious payloads.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%