Fallos del tipo CWE-1321

436 resultados

Poluição de Protótipo

Ocorre quando um atacante modifica o protótipo de um objeto JavaScript (ou estrutura similar em outras linguagens), afetando todos os objetos criados a partir dele. Isso acontece quando código inseguro copia propriedades de entrada do usuário diretamente para objetos sem validação, permitindo que chaves como '__proto__' ou 'constructor.prototype' sejam manipuladas.

Ejemplo

Um servidor Node.js faz merge de um JSON enviado pelo cliente em um objeto global de configuração usando Object.assign(). Um atacante envia {"__proto__": {"isAdmin": true}} e, com isso, todos os novos objetos herdam isAdmin=true, contornando autenticação.

Cómo mitigar

Valide e sanitize chaves de entrada, bloqueando '__proto__', 'constructor' e 'prototype'. Use Object.create(null) para objetos sem herança ou operações seguras como Object.defineProperty(). Em frameworks modernos, prefira bibliotecas que já tratam isso (ex: deep-clone com whitelist de propriedades).

CVE-2026-71437MEDIUMMermaid Architecture diagrams are vulnerable to prototype pollutionEPSS 0.5%CVE-2026-73562MEDIUMMongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)EPSS 0.5%CVE-2025-13158CRITICALapidoc-core - prototype pollution in api_group.js, api_param_title.js, api_use.js, and api_permission.js workerEPSS 0.5%CVE-2026-55091HIGHflat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id keyEPSS 0.5%CVE-2026-104848CRITICALTinypool: Prototype Pollution gadget in worker options leads to Remote Code ExecutionEPSS 0.5%CVE-2026-101909HIGHAxios: Prototype Pollution Gadget in axios toFormData OptionsEPSS 0.5%CVE-2024-39003HIGHamoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function setValue. This vulnerability allows attackers toEPSS 0.5%CVE-2026-48714CRITICALi18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting namesEPSS 0.5%CVE-2026-48713CRITICALi18next-fs-backend: Prototype pollution via crafted missing-key stringEPSS 0.5%CVE-2026-92779HIGHBuilder.io Gen2 SDKs through 5.2.11 Prototype Pollution via BindingsEPSS 0.5%CVE-2024-57077CRITICALThe latest version of utils-extend (1.0.8) is vulnerable to Prototype Pollution through the entry function(s) lib.extend. An attacker can suEPSS 0.5%CVE-2024-34273MEDIUMnjwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method.EPSS 0.5%CVE-2026-101904MEDIUMAxios: Header Injection via Inherited headers After Minimal InterceptorEPSS 0.5%CVE-2026-27212CRITICALSwiper has a Prototype Pollution VulnerabilityEPSS 0.5%CVE-2024-57066HIGHA prototype pollution in the lib.deep function of @ndhoule/defaults v2.0.1 allows attackers to cause a Denial of Service (DoS) via supplyingEPSS 0.5%CVE-2026-104849CRITICALTinypool: Prototype Pollution Gadget to RCE in run() optionsEPSS 0.5%CVE-2025-57354MEDIUMA vulnerability exists in the 'counterpart' library for Node.js and the browser due to insufficient sanitization of user-controlled input inEPSS 0.5%CVE-2026-55388HIGHpiscina: Prototype Pollution Gadget → RCE via inherited options.filenameEPSS 0.5%CVE-2023-30857LOW@aedart/support possibly vulnerable to prototype pollution in metadata record, when using meta decoratorEPSS 0.5%CVE-2026-66922MEDIUMPivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of ServiceEPSS 0.5%