12 matches found
CVE-2024-36580
A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...
Prototype Pollution
@cdr0/sg is vulnerable to prototype pollution. The vulnerability is due to improper handling of user-supplied inputs within ref.js , specifically allowing manipulation of the proto and constructor.prototype properties. This allows attackers to alter the behavior of all objects inheriting from the...
@cdr0/active-development (1.0.0), @cdr0/config (>=1.0.1, <=1.0.2) +6 more potentially affected by CVE-2024-36580 via @cdr0/sg (1.0.10)
@cdr0/sg NPM version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @cdr0/sg and may be impacted: - @cdr0/active-development 1.0.0 - @cdr0/config =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-36580 Source advisory:...
@cdr0/active-development (1.0.0), @cdr0/config (>=1.0.1, <=1.0.2) +6 more potentially affected by CVE-2024-36580 via @cdr0/sg (1.0.10)
@cdr0/sg NPM version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @cdr0/sg and may be impacted: - @cdr0/active-development 1.0.0 - @cdr0/config =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-36580 Source advisory:...
CVE-2024-36580
A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...
CVE-2024-36580
The @cdr0/sg package (version 1.0.10 ) is vulnerable to a Prototype Pollution issue. The root cause stems from improper handling of user-supplied inputs within ref.js , specifically allowing the manipulation of __proto__ and constructor.prototype properties. This flaw enables an attacker to alt...
CVE-2024-36580
A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...
cdr0-sg security vulnerability
cdr0-sg is an application by Brian C Sparks Personal Developer. A security vulnerability exists in cdr0 sg version 1.0.10, which originates from allowing an attacker to execute arbitrary code...
CVE-2024-36580: Improperly Controlled Modification of Object Prototype Attributes
A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...
PT-2024-27079 · Cdr0 Sg · Cdr0 Sg
Name of the Vulnerable Software and Affected Versions: cdr0 sg version 1.0.10 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code. Recommendations: For version 1.0.10, at the moment, there is no information about a newer version that contains a fix for this issue...
