Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WebLogic Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability - CVE-2020-5258 - Vulnerability Database
WebLogic

WebLogic Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability - CVE-2020-5258

High
Reference: CVE-2020-5258
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-5258
Title: WebLogic Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
Overview:

In affected versions of dojo (NPM package) the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes such as objects. An attacker manipulates these attributes to overwrite or pollute a JavaScript application object prototype of the base object by injecting other values. This has been patched in versions 1.12.8 1.13.7 1.14.6 1.15.3 and 1.16.2