Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

jsonic-next

2.12.1

Source

cve@mitre.org

CVE-2024-39002 details

Published : July 1, 2024, 1:15 p.m.
Last Modified : July 1, 2024, 4:37 p.m.

Description

rjrodger jsonic-next v2.12.1 was discovered to contain a prototype pollution via the function util.clone. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://gist.github.com/mestrtee/9a2b522d59c53f31f45c1edb96459693	cve@mitre.org

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-39002