CVE-2024-57064

A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. NOTE: the Supplier disputes this because they found that the lib.setValue function is not utilized...

CVE-2024-57064

The CVE refers to a prototype pollution issue in the lib.setValue function of Syncfusion EJ2-Spreadsheet (v27.2.2) that could enable DoS via crafted payloads. The supplier disputes the issue by noting that lib.setValue is not utilized. Connected documents consistently describe a DoS-inducing prot...