CVE-2024-29042

creationtimestamp| type| source ---|---|--- 2024-07-18 07:52:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8014...

@bibojoe/translatejsonfile (>=1.0.1, <=1.0.7), @i18n-kit/translate (>=0.0.1-beta.1, <=0.0.1) +53 more potentially affected by CVE-2024-29042 via translate (>=0.7.0, <=2.0.2)

translate NPM version =0.7.0, =1.0.1, =0.0.1-beta.1, =1.0.5, =1.0.0, =1.0.21, =1.0.0, =1.0.1, =1.0.1, =1.2.3, =1.0.0, =0.2.0, =1.0.9 and more Source cves: CVE-2024-29042 Source advisory: MEND:CVE-2024-29042...

CVE-2024-29042

CVE-2024-29042 affects the Translate package (Node.js and browser) prior to 3.0.0. An attacker who controls the second variable of the translate function can cause a cache poisoning attack by overwriting the cache key via the opt.id parameter, enabling them to influence subsequent users’ translat...