CVE-2024-36573

Publication date

2024-06-17 00:00:00

Family

mitre

State

PUBLISHED

Description

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@almela/obx/build/index.js:470), Object.set (obx/build/index.js:269) component.