An issue inandrei-tatar nora-firebase-common between v.1.0.41 and v.1.12.2 allows a remote attacker to execute arbitrary code via a crafted script to the updateState parameter of the updateStateInternal method.
References
Configurations
No configuration.
History
22 Aug 2024, 16:35
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
CWE | CWE-1321 |
26 Apr 2024, 04:15
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
References |
|
18 Apr 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-18 15:15
Updated : 2024-08-22 16:35
NVD link : CVE-2024-30564
Mitre link : CVE-2024-30564
CVE.ORG link : CVE-2024-30564
JSON object : View
Products Affected
No product.
CWE
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')