Prototype Pollution

2024-06-2406:05:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

prototype pollution

vulnerability

remote code execution

improper key restrictions

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

@byondreal/accessor is vulnerable to Prototype Pollution. The vulnerability is due to improper key restrictions to prevent object prototype manipulation, which allows an attacker to overwrite the object prototype which can result in remote code execution among other attacks.

CPENameOperatorVersion
@byondreal/accessoreq1.0.0
@byondreal/accessoreq1.0.0

CPE	Name	Operator	Version
	@byondreal/accessor	eq	1.0.0
	@byondreal/accessor	eq	1.0.0

References

gist.github.com/mestrtee/97bc2fbfbcbde3a54d5536c9adeee34c