Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/05 12:00 a.m.•2 views

CVE-2024-57064: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. NOTE: the Supplier disputes this because they found that the lib.setValue function is not utilized...

7.5CVSS5.8AI score0.00443EPSS
SaveExploits0References1
Rows per page
Query Builder