CVE-2024-24293

May 20, 2024, 7:34 p.m.

Product(s) Impacted

@bit/loader

  • 10.0.3

Description

A Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the M function e argument in index.js.

Weaknesses

Date

Published: May 20, 2024, 6:15 p.m.

Last Modified: May 20, 2024, 7:34 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References