Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47853
HistoryJul 02, 2024 - 6:48 a.m.

Prototype Pollution

2024-07-0206:48:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
prototype pollution
requirejs
vulnerability
object.prototype
attackers

6.7 Medium

AI Score

Confidence

High

requirejs is vulnerable to Prototype Pollution. The vulnerability is due to missing prototype checks in the config, s.contexts._.configure, and parse functions, which allows an attackers to modify the built-in Object.prototype by passing arguments containing the special __proto__ key, which results in behavior modifications of the library.

CPENameOperatorVersion
requirejsle2.3.6
requirejsle2.3.6

6.7 Medium

AI Score

Confidence

High

Related for VERACODE:47853