Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5818
HistoryFeb 15, 2018 - 5:19 a.m.

Prototype Pollution

2018-02-1505:19:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.001 Low

EPSS

Percentile

46.8%

lodash is vulnerable to prototype pollution attacks. Attackers can add or modify existing properties relating to an Object by using the utilities function to change the prototype of said Object. Using this flaw, attackers can trigger denial of service (DoS) attacks and in some situations remote code execution(RCE) attacks.