Fallos del tipo CWE-1321

378 resultados

Poluição de Protótipo

Ocorre quando um atacante modifica o protótipo de um objeto JavaScript (ou estrutura similar em outras linguagens), afetando todos os objetos criados a partir dele. Isso acontece quando código inseguro copia propriedades de entrada do usuário diretamente para objetos sem validação, permitindo que chaves como '__proto__' ou 'constructor.prototype' sejam manipuladas.

Ejemplo

Um servidor Node.js faz merge de um JSON enviado pelo cliente em um objeto global de configuração usando Object.assign(). Um atacante envia {"__proto__": {"isAdmin": true}} e, com isso, todos os novos objetos herdam isAdmin=true, contornando autenticação.

Cómo mitigar

Valide e sanitize chaves de entrada, bloqueando '__proto__', 'constructor' e 'prototype'. Use Object.create(null) para objetos sem herança ou operações seguras como Object.defineProperty(). Em frameworks modernos, prefira bibliotecas que já tratam isso (ex: deep-clone com whitelist de propriedades).

CVE-2023-26105HIGHAll versions of the package utilities are vulnerable to Prototype Pollution via the _mix function. EPSS 1.3%CVE-2025-25015CRITICALKibana arbitrary code execution via prototype pollutionEPSS 1.3%CVE-2021-3666HIGHPrototype Pollution in fiznool/body-parser-xmlEPSS 1.3%CVE-2022-37614CRITICALPrototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf via EPSS 1.3%CVE-2022-1295HIGHPrototype Pollution in alvarotrigo/fullpage.jsEPSS 1.3%CVE-2021-43787CRITICALXSS via prototype pollutionEPSS 1.3%CVE-2021-4307MEDIUMYomguithereal Baobab prototype pollutionEPSS 1.3%CVE-2023-26133HIGHAll versions of the package progressbar.js are vulnerable to Prototype Pollution via the function extend() in the file utils.js. EPSS 1.3%CVE-2020-36604HIGHhoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.EPSS 1.2%CVE-2021-39205MEDIUMDOM-based XSS/Content Spoofing via Prototype PollutionEPSS 1.2%CVE-2023-26113HIGHVersions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/EPSS 1.2%CVE-2022-37623CRITICALPrototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable EPSS 1.2%CVE-2023-3696CRITICALPrototype Pollution in automattic/mongooseEPSS 1.2%CVE-2023-28427HIGHPrototype pollution in matrix-js-sdkEPSS 1.2%CVE-2023-45827HIGHPrototype Pollution vulnerability in @clickbar/dot-diverEPSS 1.2%CVE-2024-30564CRITICALAn issue inandrei-tatar nora-firebase-common between v.1.0.41 and v.1.12.2 allows a remote attacker to execute arbitrary code via a crafted EPSS 1.2%CVE-2024-38996CRITICALag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. ThisEPSS 1.2%CVE-2024-48910CRITICALDOMPurify vulnerable to tampering by prototype polutionEPSS 1.2%CVE-2022-37621CRITICALPrototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable EPSS 1.1%CVE-2022-37611CRITICALPrototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js.EPSS 1.1%