Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22959
HistoryApr 07, 2020 - 9:14 a.m.

Prototype Pollution

2020-04-0709:14:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2

0.001 Low

EPSS

Percentile

38.8%

confinit is vulnerable to prototype pollution. The vulnerability exists because the function setDeepProperty allows the manipulation of properties of Object.prototype as it accepts the __proto__ payload.

CPENameOperatorVersion
confiniteq0.3.0
confiniteq0.3.0

0.001 Low

EPSS

Percentile

38.8%