CVE-2024-38999

2024-07-0100:00:00

mitre

github.com

jrburke requirejs v2.3.6

prototype pollution

arbitrary code execution

denial of service

AI Score

7.8

Confidence

High

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts._.configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:jrburke:requirejs:2.3.6:*:*:*:*:*:*:*"
    ],
    "vendor": "jrburke",
    "product": "requirejs",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.6"
      }
    ],
    "defaultStatus": "unknown"
  }
]