CVE-2024-39016: Improperly Controlled Modification of Object Prototype Attributes

che3vinci c3/utils-1 1.0.131 was discovered to contain a prototype pollution via the function assign. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

PT-2024-28326 · Che3Vinci · C3/Utils-1

Name of the Vulnerable Software and Affected Versions: che3vinci c3/utils-1 version 1.0.131 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution vulnerability in the assign function...