@intlify/shared Prototype Pollution vulnerability

🗓️ 02 Dec 2024 17:26:47Reported by GitHub Advisory DatabaseType

@intlify/shared Prototype Pollution vulnerability in version 10.0.4. Allows Remote Code Execution via pollutedKey in global prototype chain

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-52810	29 Nov 202418:41	–	circl
CNNVD	Shared 安全漏洞	29 Nov 202400:00	–	cnnvd
CVE	CVE-2024-52810	29 Nov 202418:36	–	cve
Cvelist	CVE-2024-52810 Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4	29 Nov 202418:36	–	cvelist
EUVD	EUVD-2024-3480	3 Oct 202520:07	–	euvd
NVD	CVE-2024-52810	29 Nov 202419:15	–	nvd
OSV	CVE-2024-52810 Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4	29 Nov 202418:36	–	osv
OSV	GHSA-HJWQ-MJWJ-4X6C @intlify/shared Prototype Pollution vulnerability	2 Dec 202417:26	–	osv
Positive Technologies	PT-2024-35459 · Unknown · @Intlify/Shared	29 Nov 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-52810	23 May 202510:34	–	redhatcve

Vulners

Node

intlify vue-i18nRange10.0.0–10.0.5npm

intlify vue-i18n-coreRange10.0.0–10.0.5npm

intlify sharedRange10.0.0–10.0.5npm

petite-vue-i18nRange10.0.0–10.0.5npm

intlify vue-i18nRange9.7.0–9.14.2npm

intlify vue-i18n-coreRange9.7.0–9.14.2npm

intlify sharedRange9.7.0–9.14.2npm

Source	Link
github	www.github.com/intlify/vue-i18n/security/advisories/GHSA-hjwq-mjwj-4x6c
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-52810
github	www.github.com/intlify/vue-i18n/commit/9f20909ef8c9232a1072d7818e12ed6d6451024d
github	www.github.com/advisories/GHSA-hjwq-mjwj-4x6c

02 Dec 2024 17:26Current

8.7High risk

Vulners AI Score8.7

CVSS 46.9

EPSS0.00103

SSVC