Weaknesses of type CWE-1321

380 results

Poluição de Protótipo

É a capacidade de um atacante modificar o protótipo de objetos JavaScript (ou estruturas similares em outras linguagens), afetando todas as instâncias daquela classe. Isso ocorre quando o código não valida ou sanitiza chaves de entrada antes de atribuir propriedades a objetos, permitindo acesso a `__proto__`, `constructor.prototype` ou `prototype`. O risco é grave: dados sensíveis podem ser injetados globalmente, lógica de autenticação contornada, ou até código executado.

Example

Um servidor Node.js recebe um objeto JSON `{"name": "João", "__proto__": {"isAdmin": true}}` e o mescla ingenuamente em um objeto de usuário via `Object.assign(usuario, entrada)`. De repente, todos os novos objetos criados herdam `isAdmin: true`, elevando privilégios sem qualquer validação real.

How to mitigate

Nunca confie em chaves de entrada: valide e bloqueie explicitamente chaves perigosas como `__proto__`, `constructor`, `prototype` antes de atribuir. Use `Object.create(null)` para criar objetos sem protótipo herdado, ou bibliotecas seguras como `lodash.merge` com configurações defensivas. Em APIs REST, considere esquemas estritos (JSON Schema) que rejeitam propriedades inesperadas.

CVE-2024-36583HIGHA Prototype Pollution issue in byondreal accessor <= 1.0.0 allows an attacker to execute arbitrary code via @byondreal/accessor/index.EPSS 0.6%CVE-2024-39016HIGHche3vinci c3/utils-1 1.0.131 was discovered to contain a prototype pollution via the function assign. This vulnerability allows attackers toEPSS 0.6%CVE-2024-21528MEDIUMAll versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improEPSS 0.6%CVE-2026-25881CRITICAL@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)EPSS 0.6%CVE-2025-66456CRITICALElysia vulnerable to prototype pollution with multiple standalone schema validationEPSS 0.6%CVE-2026-33994MEDIUMLocutus Prototype Pollution due to incomplete fix for CVE-2026-25521EPSS 0.6%CVE-2024-36582CRITICALalexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js)EPSS 0.6%CVE-2024-52441CRITICALWordPress Quick Learn plugin <= 1.0.1 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2025-62381HIGHsveltekit-superforms Prototype Pollution in `parseFormData` function of `formData.js`EPSS 0.6%CVE-2024-57065HIGHA prototype pollution in the lib.createPath function of utile v0.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a craEPSS 0.5%CVE-2026-48795HIGHIncomplete fix for CVE-2026-25754 in @adonisjs/bodyparserEPSS 0.5%CVE-2026-85625CRITICALsift 17.1.3 Prototype Pollution Remote Code Execution via $whereEPSS 0.5%CVE-2024-57072HIGHA prototype pollution in the lib.requireFromString function of module-from-string v3.3.1 allows attackers to cause a Denial of Service (DoS)EPSS 0.5%CVE-2026-44966HIGHVelocity.js: Prototype Pollution in #set path assignmentEPSS 0.5%CVE-2024-12556HIGHKibana Prototype Pollution can lead to code injectionEPSS 0.5%CVE-2025-57347CRITICALA vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConflict function, whichEPSS 0.5%CVE-2024-57083HIGHA prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a DeniEPSS 0.5%CVE-2026-44791CRITICALn8n: XML Node Prototype Pollution Patch BypassEPSS 0.5%CVE-2026-15538MEDIUMprimefaces primereact API ObjectUtils.js ObjectUtils.mutateFieldData prototype pollutionEPSS 0.5%CVE-2026-55886MEDIUMJodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set()EPSS 0.5%