CVE-2024-36580

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...

Prototype Pollution

@cdr0/sg is vulnerable to prototype pollution. The vulnerability is due to improper handling of user-supplied inputs within ref.js , specifically allowing manipulation of the proto and constructor.prototype properties. This allows attackers to alter the behavior of all objects inheriting from the...

@cdr0/active-development (=1.0.0), @cdr0/config (>=1.0.1 <=1.0.2) +6 more potentially affected by CVE-2024-36580 via @cdr0/sg (=1.0.10)

@cdr0/sg NPM version =1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @cdr0/sg and may be impacted: - @cdr0/active-development =1.0.0 - @cdr0/config =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-36580 Source advisory:...

CVE-2024-36580

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...

CVE-2024-36580

CVE-2024-36580 affects cdr0 sg 1.0.10 with a Prototype Pollution vulnerability due to improper handling of user-supplied inputs in ref.js, allowing modification of proto and constructor.prototype. The Veracode entry notes potential remote code execution or denial of service as outcomes for affect...

PT-2024-27079 · Cdr0 Sg · Cdr0 Sg

Name of the Vulnerable Software and Affected Versions: cdr0 sg version 1.0.10 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code. Recommendations: For version 1.0.10, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2024-36580

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...

cdr0-sg security vulnerability

cdr0-sg is an application by Brian C Sparks Personal Developer. A security vulnerability exists in cdr0 sg version 1.0.10, which originates from allowing an attacker to execute arbitrary code...

CVE-2024-36580

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...