Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:12685
HistoryJan 15, 2019 - 9:20 a.m.

Prototype Override Protection Bypass

2019-01-1509:20:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.001 Low

EPSS

Percentile

47.5%

qs is vulnerable to prototype override protection bypass. It is possible for an attacker to bypass the protection and overwrite prototype properties and functions by prefixing the name of the parameter with [ or ]. Overwriting these properties on the object prototype can impact application logic, potentially allowing attackers to change security controls, modify data, and cause even worse impact.