Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7685
HistoryNov 05, 2018 - 3:34 a.m.

Prototype Pollution

2018-11-0503:34:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.001 Low

EPSS

Percentile

40.5%

cached-path-relative is vulnerable to a prototype pollution attack. Attackers can add or modify existing properties relating to an Object by using the utilities function to change the prototype of said Object. Using this flaw, attackers can trigger denial of service (DoS) attacks and in some situations remote code execution (RCE) attacks.