THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-39018

Assignermitre
Reserved2024-06-21
Published2024-07-01
Updated2024-07-10

Description

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

References

https://gist.github.com/mestrtee/be75c60307b2292884cc03cebd361f3f

cve.org CVE-2024-39018

nvd.nist.gov CVE-2024-39018

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-39018
© Copyright 2024 THREATINT. Made in Cyprus with +