Fallos del tipo CWE-1321

436 resultados

Poluição de Protótipo

Ocorre quando um atacante modifica o protótipo de um objeto JavaScript (ou estrutura similar em outras linguagens), afetando todos os objetos criados a partir dele. Isso acontece quando código inseguro copia propriedades de entrada do usuário diretamente para objetos sem validação, permitindo que chaves como '__proto__' ou 'constructor.prototype' sejam manipuladas.

Ejemplo

Um servidor Node.js faz merge de um JSON enviado pelo cliente em um objeto global de configuração usando Object.assign(). Um atacante envia {"__proto__": {"isAdmin": true}} e, com isso, todos os novos objetos herdam isAdmin=true, contornando autenticação.

Cómo mitigar

Valide e sanitize chaves de entrada, bloqueando '__proto__', 'constructor' e 'prototype'. Use Object.create(null) para objetos sem herança ou operações seguras como Object.defineProperty(). Em frameworks modernos, prefira bibliotecas que já tratam isso (ex: deep-clone com whitelist de propriedades).

CVE-2023-26158HIGHAll versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing check if the attribute EPSS 0.8%CVE-2026-42264HIGHAxios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijackingEPSS 0.8%CVE-2026-25047CRITICALdeepHas vulnerable to Prototype Pollution via constructor.prototypeEPSS 0.8%CVE-2024-34148MEDIUMJenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is EPSS 0.8%CVE-2024-39013CRITICAL2o3t-utility v0.1.2 was discovered to contain a prototype pollution via the function extend. This vulnerability allows attackers to execute EPSS 0.8%CVE-2024-24292CRITICALA Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js compoEPSS 0.8%CVE-2024-36580CRITICALA Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code.EPSS 0.8%CVE-2024-22443HIGHA vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conEPSS 0.8%CVE-2024-52810MEDIUMPrototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4EPSS 0.8%CVE-2023-26102HIGHAll versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function EPSS 0.8%CVE-2024-21529HIGHVersions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. EPSS 0.8%CVE-2026-85625CRITICALsift 17.1.3 Prototype Pollution Remote Code Execution via $whereEPSS 0.7%CVE-2025-62381HIGHsveltekit-superforms Prototype Pollution in `parseFormData` function of `formData.js`EPSS 0.7%CVE-2023-32305HIGHaiven-extras PostgreSQL Privilege Escalation Through Overloaded Search PathEPSS 0.7%CVE-2024-32866HIGHConform contains Prototype Pollution Vulnerability in `parseWith...` functionEPSS 0.7%CVE-2022-42743MEDIUMdeep-parse-json 1.0.2 - Prototype PollutionEPSS 0.7%CVE-2022-41714MEDIUMfastest-json-copy 1.0.1 - Prototype PollutionEPSS 0.7%CVE-2025-5150MEDIUMdocarray Web API torch_dataset.py __getitem__ prototype pollutionEPSS 0.7%CVE-2026-25150CRITICALPrototype Pollution via FormData Processing in Qwik CityEPSS 0.7%CVE-2024-21505HIGHVersions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due toEPSS 0.7%