Web Application Security

090502105 - jQuery.extend.Object.Prototype.Pollution

Description

This indicates an attack attempt to exploit an Object.Prototype Pollution Vulnerability in jQuery.
The vulnerability is due to improper validation of using jQuery.extend to manipulate source objects with enumerable __proto__ property. A remote attacker could exploit this to execute arbitrary code by overwriting or extending the native Object.prototype via passing crafted Javascript to modules using a vulnerable jQuery version.