Security Advisory

CVE-2024-39018

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-07-01 00:00:00
Last updated 2024-08-02 04:19:20
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.