CVE-2024-24292

A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js component...

CVE-2024-24292

A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js component...

CVE-2024-24292

CVE-2024-24292 affects Aliconnect /sdk v0.0.6. The vulnerability is a prototype pollution in the aim.js component’s aim function, enabling arbitrary code execution. CVSS v3.1 metrics indicate a critical impact (9.8) with network attack vector, no privileges required, no user interaction, and high...