Lucene search

K
osvGoogleOSV:CVE-2022-24279
HistoryApr 15, 2022 - 8:15 p.m.

CVE-2022-24279

2022-04-1520:15:11
Google
osv.dev
4
prototype pollution
cve-2022-24279
incomplete fix
object prototypes

AI Score

9.4

Confidence

High

EPSS

0.007

Percentile

79.8%

The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-7701

AI Score

9.4

Confidence

High

EPSS

0.007

Percentile

79.8%