Weaknesses of type CWE-1321

380 results

Poluição de Protótipo

É a capacidade de um atacante modificar o protótipo de objetos JavaScript (ou estruturas similares em outras linguagens), afetando todas as instâncias daquela classe. Isso ocorre quando o código não valida ou sanitiza chaves de entrada antes de atribuir propriedades a objetos, permitindo acesso a `__proto__`, `constructor.prototype` ou `prototype`. O risco é grave: dados sensíveis podem ser injetados globalmente, lógica de autenticação contornada, ou até código executado.

Example

Um servidor Node.js recebe um objeto JSON `{"name": "João", "__proto__": {"isAdmin": true}}` e o mescla ingenuamente em um objeto de usuário via `Object.assign(usuario, entrada)`. De repente, todos os novos objetos criados herdam `isAdmin: true`, elevando privilégios sem qualquer validação real.

How to mitigate

Nunca confie em chaves de entrada: valide e bloqueie explicitamente chaves perigosas como `__proto__`, `constructor`, `prototype` antes de atribuir. Use `Object.create(null)` para criar objetos sem protótipo herdado, ou bibliotecas seguras como `lodash.merge` com configurações defensivas. Em APIs REST, considere esquemas estritos (JSON Schema) que rejeitam propriedades inesperadas.

CVE-2022-41713MEDIUMdeep-object-diff 1.1.0 - Prototype PollutionEPSS 0.7%CVE-2025-5150MEDIUMdocarray Web API torch_dataset.py __getitem__ prototype pollutionEPSS 0.7%CVE-2026-18420HIGHRCE via Prototype Pollution in OpenSearch DashboardsEPSS 0.7%CVE-2026-25150CRITICALPrototype Pollution via FormData Processing in Qwik CityEPSS 0.7%CVE-2026-59206HIGHn8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project EnumerationEPSS 0.7%CVE-2024-21548HIGHVersions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attaEPSS 0.7%CVE-2024-36572CRITICALPrototype pollution in allpro form-manager 0.7.4 allows attackers to run arbitrary code and cause other impacts via the functions setDefaultEPSS 0.7%CVE-2025-3982MEDIUMnortikin Sverchok Set Property Mk2 Node getsetprop_mk2.py SvSetPropNodeMK2 prototype pollutionEPSS 0.6%CVE-2025-48054MEDIUMRadashi Vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')EPSS 0.6%CVE-2022-41714MEDIUMfastest-json-copy 1.0.1 - Prototype PollutionEPSS 0.6%CVE-2022-42743MEDIUMdeep-parse-json 1.0.2 - Prototype PollutionEPSS 0.6%CVE-2024-45435CRITICALChartist 1.x through 1.3.0 allows Prototype Pollution via the extend function.EPSS 0.6%CVE-2025-27597HIGHVue I18n Prototype Pollution in `handleFlatJson`EPSS 0.6%CVE-2026-42041MEDIUMAxios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge StrategyEPSS 0.6%CVE-2026-53676HIGHThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user whoEPSS 0.6%CVE-2023-2582MEDIUMA prototype pollution vulnerability exists in Strikingly CMS which can result in reflected cross-site scripting (XSS) in affected applicatioEPSS 0.6%CVE-2023-6293HIGHPrototype Pollution in robinbuschmann/sequelize-typescriptEPSS 0.6%CVE-2026-42044MEDIUMAxios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`EPSS 0.6%CVE-2024-45277MEDIUMPrototype Pollution vulnerability in SAP HANA ClientEPSS 0.6%CVE-2026-33993MEDIUMLocutus has Prototype Pollution via __proto__ Key Injection in unserialize()EPSS 0.6%