Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to CVE-2024-39008

Summary IBM Security QRadar Log Management AQL Plugin is vulnerable to CVE-2024-39008. This vulnerability has been addressed in the update. Vulnerability Details CVEID:CVE-2024-39008 DESCRIPTION: robinweser fast-loops could allow a remote attacker to execute arbitrary code on the system, caused b...

CVE-2024-39008

A flaw was found in the fast-loops Node.js package. This flaw allows an attacker to alter the behavior of all objects inheriting from the affected prototype by passing arguments to the objectMergeDeep function crafted with the built-in property: proto. This issue can potentially lead to a denial ...

CVE-2024-39008

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-39008

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-39008

The robinweser fast-loops Node.js package (specifically v1.1.3 ) is vulnerable to prototype pollution via the objectMergeDeep function. This flaw exists because the function fails to properly validate arguments, allowing an attacker to inject arbitrary properties into the global object prototype ...

CVE-2024-39008

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...