Fallos del tipo CWE-1321

379 resultados

Poluição de Protótipo

Ocorre quando um atacante modifica o protótipo de um objeto JavaScript (ou estrutura similar em outras linguagens), afetando todos os objetos criados a partir dele. Isso acontece quando código inseguro copia propriedades de entrada do usuário diretamente para objetos sem validação, permitindo que chaves como '__proto__' ou 'constructor.prototype' sejam manipuladas.

Ejemplo

Um servidor Node.js faz merge de um JSON enviado pelo cliente em um objeto global de configuração usando Object.assign(). Um atacante envia {"__proto__": {"isAdmin": true}} e, com isso, todos os novos objetos herdam isAdmin=true, contornando autenticação.

Cómo mitigar

Valide e sanitize chaves de entrada, bloqueando '__proto__', 'constructor' e 'prototype'. Use Object.create(null) para objetos sem herança ou operações seguras como Object.defineProperty(). Em frameworks modernos, prefira bibliotecas que já tratam isso (ex: deep-clone com whitelist de propriedades).

CVE-2026-27837MEDIUMDottie vulnerable to prototype pollution bypass via non-first path segments in set() and transform()EPSS 0.3%CVE-2026-23736HIGHseroval Affected by Prototype Pollution via JSON DeserializationEPSS 0.3%CVE-2025-53626MEDIUMpdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluationEPSS 0.3%CVE-2026-25521CRITICALLocutus is vulnerable to Prototype PollutionEPSS 0.3%CVE-2026-66922MEDIUMPivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of ServiceEPSS 0.3%CVE-2026-72769MEDIUMn8n before 1.123.67 Prototype Pollution via VM Expression EngineEPSS 0.3%CVE-2026-46510HIGHPrototype pollution in form-data-objectizer via bracket-notation form keysEPSS 0.3%CVE-2026-54306MEDIUMn8n: Prototype Pollution enables confused-deputy execution via public webhooksEPSS 0.3%CVE-2026-33916MEDIUMHandlebars.js has Prototype Pollution Leading to XSS through Partial Template InjectionEPSS 0.3%CVE-2023-0163HIGHPrototype Pollution in convictEPSS 0.3%CVE-2026-56763MEDIUMHono - Prototype Pollution via __proto__ Key in parseBody with dot OptionEPSS 0.3%CVE-2026-84367LOWjoi: object().rename() with a template target can set the validated object's prototypeEPSS 0.3%CVE-2026-44292MEDIUMprotobufjs: Prototype injection in generated message constructorsEPSS 0.3%CVE-2026-89011HIGHisomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfoEPSS 0.3%CVE-2026-54737HIGH@phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property MergingEPSS 0.3%CVE-2026-92781MEDIUMBuilder.io Gen2 SDKs through 5.2.11 Prototype Pollution via builder.userAttributesEPSS 0.3%CVE-2026-90771MEDIUMjoi before 17.13.8 and 18.2.9 Prototype Pollution via messagesEPSS 0.3%CVE-2026-84368LOWjoi: Prototype pollution via a `__proto__` language key in custom messagesEPSS 0.3%CVE-2026-57439MEDIUMCyberChef: Prototype pollution in Series Chart operationEPSS 0.2%CVE-2026-67319MEDIUMaxios before 0.33.0 Prototype Pollution via nested option objectsEPSS 0.2%