CVE-2021-20084

2021-04-2318:15:08

Google

osv.dev

security vulnerability

prototype pollution

jquery-sparkle 1.5.2-beta

object manipulation

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

44.6%

JSON

Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’) in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype.

References

github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-sparkle.md