Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29187
HistoryFeb 01, 2021 - 3:58 a.m.

Prototype Pollution

2021-02-0103:58:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
iniparserjs
prototype pollution
vulnerability
ini_parser.js
attributes modification

EPSS

0.001

Percentile

45.7%

iniparserjs is vulnerable to prototype pollution. An attacker can inject arbitrary properties into existing construct prototypes via concatenation of array in ini_parser.js to modify attributes such as __proto__, constructor and prototype.

EPSS

0.001

Percentile

45.7%

Related for VERACODE:29187