Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:5 a.m.1 views

CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS6.2AI score0.0027EPSS
Exploits0References1
OSV
OSV
added 2024/07/01 3:32 p.m.11 views

GHSA-VG6V-JCG3-5MP7 @aofl/cli-lib Prototype Pollution vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS6.8AI score0.0027EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/07/01 3:32 p.m.9 views

@aofl/cli-lib Prototype Pollution vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS8.4AI score0.0027EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/07/01 1:15 p.m.8 views

CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS0.0027EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/01 12:0 a.m.9 views

CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.0027EPSS
Exploits0References2
CVE
CVE
added 2024/07/01 12:0 a.m.40 views

CVE-2024-38987

CVE-2024-38987 affects aofl cli-lib v3.14.0, where a prototype pollution flaw in the defaultsDeep component enables arbitrary property injection, potentially allowing code execution or DoS. The connected advisories (GHSA and OSV entries) corroborate the same flaw. No specific patches or remediati...

6.3CVSS8.3AI score0.0027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/07/01 12:0 a.m.8 views

CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.0027EPSS
Exploits0References2
Rows per page
Query Builder