Products
almela obx
- before v.0.0.4
Source
cve@mitre.org
Tags
CVE-2024-36573 details
Published : June 17, 2024, 4:15 p.m.
Last Modified : June 17, 2024, 4:15 p.m.
Last Modified : June 17, 2024, 4:15 p.m.
Description
almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@almela/obx/build/index.js:470), Object.set (obx/build/index.js:269) component.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://gist.github.com/mestrtee/fd8181bbc180d775f8367a2b9e0ffcd1 | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.