web3-core-subscriptions Prototype Pollution Vulnerability Allowing Denial-of-Service

A prototype pollution vulnerability has been identified in the web3-core-subscriptions package, specifically in versions through 1.10.4. The issue arises in the attachToObject function, where attackers can inject properties into Object.prototype by sending a crafted payload. This exploitation can cause a denial-of-service condition, as the minimum consequence.

Impact

Exploitation of this vulnerability can lead to denial-of-service conditions, causing application crashes or unexpected behavior.

Reproduction

The vulnerability can be reproduced by creating an instance of an object that the web3-core-subscriptions package manages. During the instantiation, a crafted payload can be supplied that injects properties into the Object.prototype. This can be done by manipulating the input to the attachToObject function, which is vulnerable to prototype pollution.