Weakness (CWE)
CWE-471: Modification of Assumed-Immutable Data (MAID)
Base Draft
The product does not properly protect an assumed-immutable element from being modified by an attacker.
How to prevent it (1 mitigation)
-
Architecture and Design, Operation, Implementation
When the data is stored or transmitted through untrusted sources that could modify the data, implement integrity checks to detect unauthorized modification, or store/transmit the data in a trusted location that is free from external influence.
Source: MITRE CWE-471
2 results · Clear filters · Feed
-
Medium 5.7CVE-2024-57708 Public exploit
An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, _…
-
Critical 9.8CVE-2020-8158 Public exploit
TypeORM vulnerable to MAID and Prototype Pollution
Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.