CVE-2024-36580

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...

CVE-2024-36580

CVE-2024-36580 affects cdr0 sg 1.0.10 with a Prototype Pollution vulnerability due to improper handling of user-supplied inputs in ref.js, allowing modification of proto and constructor.prototype. The Veracode entry notes potential remote code execution or denial of service as outcomes for affect...