CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Description
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
Hierarchy (View 1000)
Parents
Children
none
Related attack patterns (CAPEC)
CAPEC-1 · CAPEC-180 · CAPEC-77
CVEs mapped to this weakness (612)
page 31 of 31| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-23682 | Hig | 0.00 | 7.3 | 0.02 | Feb 16, 2022 | This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsing the query string in the getJsonFromUrl function, the key that is set in the result object is not properly sanitized leading to a… | ||
| CVE-2022-0432 | Med | 0.00 | 6.1 | 0.04 | Feb 2, 2022 | Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0. | ||
| CVE-2021-39227 | Med | 0.00 | 6.2 | 0.01 | Sep 17, 2021 | ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using `merge` and `clone` helper methods in the `src/core/util.ts` module results in prototype pollution. It affects the popular data visualization library Apache ECharts,… | ||
| CVE-2021-39205 | Med | 0.00 | 6.8 | 0.01 | Sep 15, 2021 | Jitsi Meet is an open source video conferencing application. Versions prior to 2.0.6173 are vulnerable to client-side cross-site scripting via injecting properties into JSON objects that were not properly escaped. There are no known incidents related to this vulnerability being… | ||
| CVE-2021-23408 | Med | 0.00 | 5.4 | 0.01 | Jul 21, 2021 | This affects the package com.graphhopper:graphhopper-web-bundle before 3.2, from 4.0-pre1 and before 4.0. The URL parser could be tricked into adding or modifying properties of Object.prototype using a constructor or __proto__ payload. | ||
| CVE-2021-23329 | Hig | 0.00 | 7.5 | 0.02 | Jan 31, 2021 | The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below. | ||
| CVE-2020-28448 | Med | 0.00 | 5.6 | 0.01 | Dec 22, 2020 | This affects the package multi-ini before 2.1.1. It is possible to pollute an object's prototype by specifying the proto object as part of an array. | ||
| CVE-2020-7768 | Hig | 0.00 | 7.5 | 0.04 | Nov 11, 2020 | The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition. | ||
| CVE-2020-7746 | Hig | 0.00 | 7.5 | 0.05 | Oct 29, 2020 | This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys… | ||
| CVE-2020-7751 | Med | 0.00 | 6.0 | 0.02 | Oct 26, 2020 | pathval before version 1.1.1 is vulnerable to prototype pollution. | ||
| CVE-2020-7709 | Med | 0.00 | 6.0 | 0.02 | Oct 5, 2020 | This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported. | ||
| CVE-2019-10744 | Cri | 0.00 | 9.1 | 0.05 | Jul 26, 2019 | Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload. |
- risk 0.00cvss 7.3epss 0.02
This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsing the query string in the getJsonFromUrl function, the key that is set in the result object is not properly sanitized leading to a…
- risk 0.00cvss 6.1epss 0.04
Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.
- risk 0.00cvss 6.2epss 0.01
ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using `merge` and `clone` helper methods in the `src/core/util.ts` module results in prototype pollution. It affects the popular data visualization library Apache ECharts,…
- risk 0.00cvss 6.8epss 0.01
Jitsi Meet is an open source video conferencing application. Versions prior to 2.0.6173 are vulnerable to client-side cross-site scripting via injecting properties into JSON objects that were not properly escaped. There are no known incidents related to this vulnerability being…
- risk 0.00cvss 5.4epss 0.01
This affects the package com.graphhopper:graphhopper-web-bundle before 3.2, from 4.0-pre1 and before 4.0. The URL parser could be tricked into adding or modifying properties of Object.prototype using a constructor or __proto__ payload.
- risk 0.00cvss 7.5epss 0.02
The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.
- risk 0.00cvss 5.6epss 0.01
This affects the package multi-ini before 2.1.1. It is possible to pollute an object's prototype by specifying the proto object as part of an array.
- risk 0.00cvss 7.5epss 0.04
The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.
- risk 0.00cvss 7.5epss 0.05
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys…
- risk 0.00cvss 6.0epss 0.02
pathval before version 1.1.1 is vulnerable to prototype pollution.
- risk 0.00cvss 6.0epss 0.02
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.
- risk 0.00cvss 9.1epss 0.05
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.