Lucene search
Veracode Vulnerability DatabaseVERACODE:47591HistoryJun 18, 2024 - 6:29 a.m.
Prototype Pollution
2024-06-1806:29:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
apphp
object-resolver
vulnerability
prototype pollution
arbitrary code execution
@apphp/object-resolver is vulnerable to Prototype Pollution. The vulnerability is due to manipulation of the prototype via the function Module.setNestedProperty, potentially allowing attackers to modify object properties to execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @apphp/object-resolver | le | 3.1.0 | |
| @apphp/object-resolver | le | 3.1.0 |
Related
github
github
Object Resolver Prototype Pollution
2024-06-17 18:31:33
cvelist
cvelist
CVE-2024-36577
2024-06-17 00:00:00
nvd
nvd
CVE-2024-36577
2024-06-17 16:15:15
cve
cve
CVE-2024-36577
2024-06-17 16:15:15
osv
osv
Object Resolver Prototype Pollution
2024-06-17 18:31:33