Fallos del tipo CWE-1321

380 resultados

Poluição de Protótipo

Ocorre quando um atacante modifica o protótipo de um objeto JavaScript (ou estrutura similar em outras linguagens), afetando todos os objetos criados a partir dele. Isso acontece quando código inseguro copia propriedades de entrada do usuário diretamente para objetos sem validação, permitindo que chaves como '__proto__' ou 'constructor.prototype' sejam manipuladas.

Ejemplo

Um servidor Node.js faz merge de um JSON enviado pelo cliente em um objeto global de configuração usando Object.assign(). Um atacante envia {"__proto__": {"isAdmin": true}} e, com isso, todos os novos objetos herdam isAdmin=true, contornando autenticação.

Cómo mitigar

Valide e sanitize chaves de entrada, bloqueando '__proto__', 'constructor' e 'prototype'. Use Object.create(null) para objetos sem herança ou operações seguras como Object.defineProperty(). Em frameworks modernos, prefira bibliotecas que já tratam isso (ex: deep-clone com whitelist de propriedades).

CVE-2023-36475CRITICALParse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollutionEPSS 3.2%CVE-2024-21512HIGHVersions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields aEPSS 3.1%CVE-2023-26136MEDIUMVersions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookiEPSS 2.5%CVE-2023-26122HIGHAll versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived fromEPSS 2.1%CVE-2021-3805HIGHPrototype Pollution in mariocasciaro/object-pathEPSS 2.1%CVE-2021-21304HIGHPrototype Pollution in DynamooseEPSS 1.9%CVE-2025-13465MEDIUMPrototype Pollution Vulnerability in Lodash _.unset and _.omit functionsEPSS 1.8%CVE-2022-37602CRITICALPrototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js.EPSS 1.8%CVE-2024-56059CRITICALWordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerabilityEPSS 1.7%CVE-2021-3757HIGHPrototype Pollution in immerjs/immerEPSS 1.7%CVE-2022-37265CRITICALPrototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.EPSS 1.6%CVE-2023-39296HIGHQTS, QuTS heroEPSS 1.6%CVE-2022-29823CRITICALFeathers - Query “__proto__” is converted to real prototypeEPSS 1.5%CVE-2021-3766HIGHPrototype Pollution in vincit/objection.jsEPSS 1.5%CVE-2021-3645MEDIUMPrototype Pollution in viking04/mergeEPSS 1.4%CVE-2024-27307CRITICALJSONata expression can pollute the "Object" prototypeEPSS 1.4%CVE-2023-0842MEDIUMxml2js 0.4.23 - Prototype PollutionEPSS 1.4%CVE-2024-29650CRITICALAn issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe componentEPSS 1.4%CVE-2021-21297HIGHPrototype Pollution in Node-RedEPSS 1.4%CVE-2021-39227MEDIUMFix prototype pollution in the zrender merge and clone helper methodsEPSS 1.4%