Weaknesses of type CWE-1321

380 results

Poluição de Protótipo

É a capacidade de um atacante modificar o protótipo de objetos JavaScript (ou estruturas similares em outras linguagens), afetando todas as instâncias daquela classe. Isso ocorre quando o código não valida ou sanitiza chaves de entrada antes de atribuir propriedades a objetos, permitindo acesso a `__proto__`, `constructor.prototype` ou `prototype`. O risco é grave: dados sensíveis podem ser injetados globalmente, lógica de autenticação contornada, ou até código executado.

Example

Um servidor Node.js recebe um objeto JSON `{"name": "João", "__proto__": {"isAdmin": true}}` e o mescla ingenuamente em um objeto de usuário via `Object.assign(usuario, entrada)`. De repente, todos os novos objetos criados herdam `isAdmin: true`, elevando privilégios sem qualquer validação real.

How to mitigate

Nunca confie em chaves de entrada: valide e bloqueie explicitamente chaves perigosas como `__proto__`, `constructor`, `prototype` antes de atribuir. Use `Object.create(null)` para criar objetos sem protótipo herdado, ou bibliotecas seguras como `lodash.merge` com configurações defensivas. Em APIs REST, considere esquemas estritos (JSON Schema) que rejeitam propriedades inesperadas.

CVE-2024-22443HIGHA vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conEPSS 0.8%CVE-2024-24292CRITICALA Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js compoEPSS 0.8%CVE-2024-52810MEDIUMPrototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4EPSS 0.8%CVE-2023-26102HIGHAll versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function EPSS 0.8%CVE-2024-38999CRITICALjrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts._.configure. This vulnerability allows EPSS 0.8%CVE-2024-21529HIGHVersions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. EPSS 0.8%CVE-2026-25047CRITICALdeepHas vulnerable to Prototype Pollution via constructor.prototypeEPSS 0.7%CVE-2023-32305HIGHaiven-extras PostgreSQL Privilege Escalation Through Overloaded Search PathEPSS 0.7%CVE-2024-32866HIGHConform contains Prototype Pollution Vulnerability in `parseWith...` functionEPSS 0.7%CVE-2026-42264HIGHAxios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijackingEPSS 0.7%CVE-2024-21505HIGHVersions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due toEPSS 0.7%CVE-2023-28103HIGHPrototype pollution in matrix-react-sdkEPSS 0.7%CVE-2025-25977CRITICALAn issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement.EPSS 0.7%CVE-2024-21489HIGHVersions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the EPSS 0.7%CVE-2024-33519HIGHAuthenticated Server-Side prototype pollution Leading to Information DisclosureEPSS 0.7%CVE-2024-39014CRITICALahilfoley cahil/utils v2.3.2 was discovered to contain a prototype pollution via the function set. This vulnerability allows attackers to exEPSS 0.7%CVE-2024-36573CRITICALalmela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@alEPSS 0.7%CVE-2024-11628MEDIUMPrototype Pollution in Progress® Telerik® Kendo UI for VueEPSS 0.7%CVE-2024-12629MEDIUMPrototype Pollution in Progress® Telerik® KendoReactEPSS 0.7%CVE-2024-24293HIGHA Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the M function e argumenEPSS 0.7%