Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28031
HistoryDec 03, 2020 - 1:36 a.m.

Prototype Pollution

2020-12-0301:36:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
keyget
prototype pollution
setbypath
object type check

EPSS

0.017

Percentile

87.9%

keyget is vulnerable to prototype pollution. The vulnerability exists as the function setByPath() did not check for the type of object before assigning value to the property.

EPSS

0.017

Percentile

87.9%