Lucene search
Veracode Vulnerability DatabaseVERACODE:47122HistoryMay 23, 2024 - 5:49 a.m.
Prototype Pollution
2024-05-2305:49:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
prototype pollution
vulnerability
missing object type checks
deepproperty function
arbitrary code execution
@blackprint/engine
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
@blackprint/engine is vulnerable to Prototype Pollution. The vulnerability is due to missing object type checks in the DeepProperty function in engine.min.js, which allows an attacker to execute arbitrary code.
Related
cve
cve
CVE-2024-24294
2024-05-20 17:15:09
osv
osv
Blackprint @blackprint/engine Prototype Pollution issue
2024-05-20 18:31:22
nvd
nvd
CVE-2024-24294
2024-05-20 17:15:09
cvelist
cvelist
CVE-2024-24294
1976-01-01 00:00:00
vulnrichment
vulnrichment
CVE-2024-24294
1976-01-01 00:00:00
github
github
Blackprint @blackprint/engine Prototype Pollution issue
2024-05-20 18:31:22
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
Related for VERACODE:47122