A prototype pollution vulnerability in the Evolver mailbox store module allows attackers with write access to the mailbox messages file to inject malicious properties into Object.prototype via unfiltered use of Object.assign(). This can modify the behavior of all JavaScript objects in the environment. The flaw exists in versions prior to 1.69.3 and is fixed in 1.69.3.