CVE-2024-36573

2024-06-1716:15:14

[email protected]

web.nvd.nist.gov

almela obx

v.0.0.4

prototype pollution

arbitrary code execution

obx/build/index.js

reduce

object.set

component

cve-2024-36573

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@almela/obx/build/index.js:470), Object.set (obx/build/index.js:269) component.

References

gist.github.com/mestrtee/fd8181bbc180d775f8367a2b9e0ffcd1