CVE-2024-36577

apphp js-object-resolver < 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty.
Configurations

No configuration.

History

03 Jul 2024, 02:03

Type Values Removed Values Added
CWE CWE-1321
CWE-79
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.3

20 Jun 2024, 12:44

Type Values Removed Values Added
Summary
  • (es) apphp js-object-resolver &lt; 3.1.1 es vulnerable a la contaminación de prototipos a través de Module.setNestedProperty.

17 Jun 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-17 16:15

Updated : 2024-07-03 02:03


NVD link : CVE-2024-36577

Mitre link : CVE-2024-36577

CVE.ORG link : CVE-2024-36577


JSON object : View

Products Affected

No product.

CWE
CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')