Vulnerabilities > CVE-2024-39012 - Unspecified vulnerability in AIS Strategyen 0.4.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
ais-ltd strategyen v0.4.0 was discovered to contain a prototype pollution via the function mergeObjects. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |