Fallos del tipo CWE-1321

378 resultados

Poluição de Protótipo

Ocorre quando um atacante modifica o protótipo de um objeto JavaScript (ou estrutura similar em outras linguagens), afetando todos os objetos criados a partir dele. Isso acontece quando código inseguro copia propriedades de entrada do usuário diretamente para objetos sem validação, permitindo que chaves como '__proto__' ou 'constructor.prototype' sejam manipuladas.

Ejemplo

Um servidor Node.js faz merge de um JSON enviado pelo cliente em um objeto global de configuração usando Object.assign(). Um atacante envia {"__proto__": {"isAdmin": true}} e, com isso, todos os novos objetos herdam isAdmin=true, contornando autenticação.

Cómo mitigar

Valide e sanitize chaves de entrada, bloqueando '__proto__', 'constructor' e 'prototype'. Use Object.create(null) para objetos sem herança ou operações seguras como Object.defineProperty(). Em frameworks modernos, prefira bibliotecas que já tratam isso (ex: deep-clone com whitelist de propriedades).

CVE-2026-15607MEDIUMtanstack db Alias Path select.ts select prototype pollutionEPSS 0.4%CVE-2026-27212CRITICALSwiper has a Prototype Pollution VulnerabilityEPSS 0.4%CVE-2026-71437MEDIUMMermaid Architecture diagrams are vulnerable to prototype pollutionEPSS 0.4%CVE-2025-57321CRITICALA Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 allows attackers to injEPSS 0.4%CVE-2025-57351MEDIUMA prototype pollution vulnerability exists in the ts-fns package versions prior to 13.0.7, where insufficient validation of user-provided keEPSS 0.4%CVE-2021-4278MEDIUMcronvel tree-kit prototype pollutionEPSS 0.4%CVE-2026-32701HIGHQwik has array method pollution in FormData processing, allowing type confusion and DoSEPSS 0.4%CVE-2026-15187MEDIUMenquirer Public Package API Enquirer.set prototype pollutionEPSS 0.4%CVE-2026-15598MEDIUMantv layout object.js setNestedValue prototype pollutionEPSS 0.4%CVE-2026-16266MEDIUMVersions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey() function in util.js. An attackerEPSS 0.4%CVE-2025-55164HIGHcontent-security-policy-parser Prototype Pollution Vulnerability May Lead to RCEEPSS 0.4%CVE-2024-36577HIGHapphp js-object-resolver < 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty.EPSS 0.4%CVE-2024-36574MEDIUMA Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON (flatten-jsoEPSS 0.4%CVE-2026-34622HIGHAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)EPSS 0.4%CVE-2024-39018MEDIUMharvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows EPSS 0.4%CVE-2026-78654MEDIUMcleverbrush framework/deep deepExtend.ts deepExtend prototype pollutionEPSS 0.4%CVE-2025-63703CRITICALnpm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().EPSS 0.4%CVE-2023-45811HIGHPrototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscatorEPSS 0.4%CVE-2025-57323HIGHmpregular is a package that provides a small program development framework based on RegularJS. A Prototype Pollution vulnerability in the mpEPSS 0.4%CVE-2025-57326HIGHA Prototype Pollution vulnerability in the byGroupAndType function of sassdoc-extras v2.5.1 and before allows attackers to inject propertiesEPSS 0.4%