Prototype pollution
≈ 1 min read
Names in other languages
No names in other languages are held for this entry yet.
Article bodies are English and are not machine-translated. A name in another language is not a translation of the article.
Prototype pollution is a class of vulnerabilities in prototype-based languages such as JavaScript runtimes that allows attackers to overwrite arbitrary properties in an object's root prototype. In a prototype pollution attack, attackers inject properties into existing JavaScript construct prototypes with unsafe merges. Prototype pollution can affect client-side and server-side runtimes. Using prototype pollution to modify properties called by gadgets could lead to Denial of Service (DoS) attacks, code execution, or privilege escalation.
Prototype pollution is a class of vulnerabilities in prototype-based languages such as JavaScript runtimes that allows attackers to overwrite arbitrary properties in an object's root prototype. In a prototype pollution attack, attackers inject properties into existing JavaScript construct prototypes with unsafe merges. Prototype pollution can affect client-side and server-side runtimes. Using prototype pollution to modify properties called by gadgets could lead to Denial of Service (DoS) attacks, code execution, or privilege escalation.
Text derived from https://en.wikipedia.org/w/index.php?oldid=1378750135 under CC BY-SA 4.0; modifications have been made.