Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47625
HistoryJun 19, 2024 - 5:41 a.m.

Prototype Pollution

2024-06-1905:41:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
vulnerability
prototype pollution
@alexbinary/object-deep-assign
extend function
index.js
attackers
object.prototype

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

@alexbinary/object-deep-assign is vulnerable to Prototype Pollution. The vulnerability is due to the lack of prototype checks in the extend function within index.js. Attackers can exploit this method to copy malicious properties to the built-in Object.prototype through special properties like __proto__ or constructor.prototype.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for VERACODE:47625