THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-38987

Assignermitre
Reserved2024-06-21
Published2024-07-01
Updated2024-07-10

Description

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

References

https://gist.github.com/mestrtee/29636943e6989e67f38251580cbcea73

https://github.com/AgeOfLearning/aofl/issues/35

cve.org CVE-2024-38987

nvd.nist.gov CVE-2024-38987

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-38987