Lucene search
+L

4 matches found

NVD
NVD
•added 2024/07/30 8:15 p.m.•36 views

CVE-2024-39012

ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

9.8CVSS0.00973EPSS
SaveExploits1References1
Mend
Mend
•added 2024/07/30 12:00 a.m.•3 views

CVE-2024-39012

ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

9.8CVSS0.00973EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•5 views

CVE-2024-39012: Improperly Controlled Modification of Object Prototype Attributes

ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

9.8CVSS6.5AI score0.00973EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/30 12:00 a.m.•84 views

CVE-2024-39012

The CVE-2024-39012 entry affects ais-ltd strategyen v0.4.0, where the mergeObjects function enables prototype pollution. The cited sources describe attackers exploiting this to achieve arbitrary code execution, Denial of Service, or related object-behavior manipulation (per Veracode and NVD). Pra...

9.8CVSS8.3AI score0.00973EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder