CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Description

The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

Diagram

Diagram illustrating CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Source: MITRE CWE™ — CWE-1321

CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') — CVE Insight