CVE-2024-39001

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-39001
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39001.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-39001
Aliases
Related
Published
2024-07-01T13:15:05.397Z
Modified
2026-04-10T05:14:21.718887Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

References

Affected packages

Git / github.com/ag-grid/ag-charts

Affected ranges

Type
GIT
Repo
https://github.com/ag-grid/ag-charts
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
368996aa1cb14afad6d66be8815be08dd34f3085
Introduced
82ca23caf59b2b605a5c08f90386da2203ea959f
Fixed
fa34f900f89f2c3b396fc4814897185f699d07ed
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "9.3.2"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.2"
        }
    ]
}
Type
GIT
Repo
https://github.com/ag-grid/ag-grid
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b632ff58db83fd24454dd027a676541581645c4b
Introduced
109f7cc0514ada6ebe1a63aaf6381ea464d281d1
Fixed
3995120e35972d65b5436f50e055b16038e119a0
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "31.3.4"
        },
        {
            "introduced": "32.0.0"
        },
        {
            "fixed": "32.0.2"
        }
    ]
}

Affected versions

1.*
1.0
1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.12.0
1.12.1
1.12.2
1.12.4
1.12.5
1.12.6
1.12.7
1.12.8
1.13.0
1.14.0
1.14.1
1.15.0
1.15.1
1.16.0
1.16.1
1.2
1.3
1.4
1.4.1
1.5.0
1.6.0
1.7.0
1.8.0
1.8.1
1.9.0
1.9.1
1.9.2
13.*
13.1.2
14.*
14.0.0
2.*
2.0.0
2.0.1
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.3.0
2.3.1
2.3.3
2.3.4
2.3.5
2.3.6
2.3.7
3.*
3.0.0
3.1.0
3.1.1
3.1.2
3.2.0
3.2.1
3.2.2
3.3.0
3.3.0-alpha.1
3.3.1
3.3.2
3.3.3
4.*
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.1.0
4.1.1
4.1.2
4.1.3
4.1.5
4.2.0
4.2.1
4.2.2
4.2.3
4.2.4
4.2.5
4.2.6
5.*
5.0.0
5.0.0-alpha.0
5.0.0-alpha.1
5.0.1
5.0.2
5.0.5
5.0.6
5.0.7
5.1.1
5.1.2
5.2.0
5.3.1
6.*
6.0.0
6.1.0
6.3.0
6.4.0
6.4.1
6.4.2
7.*
7.0.0
7.1.0
7.2.2
8.*
8.0.0
8.0.1
8.1.1
b9.*
b9.0.0-beta.20230913
b9.0.0-beta.20230913.1120
b9.0.0-beta.20230913.1649
b9.0.0-beta.20230913.1708
b9.0.0-beta.20230914
b9.0.0-beta.20231003
b9.0.0-beta.20231006
b9.0.0-beta.20231009
b9.0.0-beta.20231103
b9.0.0-beta.20231103.1459
b9.0.0-beta.20231103.1650
b9.0.0-beta.20231103.1656
b9.0.0-beta.20231114
b9.0.0-beta.20231116
b9.0.0-beta.20231117
b9.0.0-beta.20231120
b9.0.0-beta.20231121
b9.0.0-beta.20231121.1401
b9.0.0-beta.20231124
b9.0.0-beta.20231127
b9.0.0-beta.20231127.1730
b9.0.0-beta.20231128
b9.0.0-beta.20231128.1359
b9.0.0-beta.20231128.2029
b9.0.0-beta.20231128.2153
b9.0.0-beta.20231128.2222
b9.0.0-beta.20231205
b9.0.1-beta.20231211
b9.0.1-beta.20231218
b9.0.1-beta.20231218.1431
b9.0.1-beta.20231221
b9.0.1-beta.20231225
b9.0.1-beta.20240101
b9.0.1-beta.20240108
b9.0.1-beta.20240109
b9.0.1-beta.20240110
b9.0.1-beta.20240111
b9.0.1-beta.20240112
b9.0.1-beta.20240112.1444
b9.0.1-beta.20240115
b9.0.1-beta.20240115.1716
b9.0.1-beta.20240115.1744
b9.0.1-beta.20240115.2224
b9.0.2-beta.20240122
b9.0.2-beta.20240122.838
b9.0.2-beta.20240123
b9.0.2-beta.20240123.1425
b9.0.2-beta.20240124
b9.0.2-beta.20240125
b9.0.2-beta.20240126
b9.0.2-beta.20240129
b9.0.2-beta.20240129.1520
b9.0.2-beta.20240130
b9.0.2-beta.20240131
b9.0.2-beta.20240201
b9.0.2-beta.20240202
b9.0.2-beta.20240202.1536
b9.0.2-beta.20240204
b9.0.2-beta.20240205
b9.0.2-beta.20240206
b9.0.2-beta.20240206.1319
b9.0.2-beta.20240207
b9.0.2-beta.20240208
b9.0.2-beta.20240209
b9.0.2-beta.20240212
b9.0.2-beta.20240212.1816
b9.0.2-beta.20240214
b9.0.2-beta.20240214.1651
b9.0.2-beta.20240216
b9.0.2-beta.20240216.1549
b9.0.2-beta.20240218
b9.1.0-beta.20240220
b9.1.0-beta.20240225
b9.1.0-beta.20240303
b9.1.1-beta.20240307
b9.1.1-beta.20240307.1739
b9.1.1-beta.20240310
b9.1.1-beta.20240311
b9.1.1-beta.20240312
b9.1.1-beta.20240312.1520
b9.1.1-beta.20240313
b9.1.1-beta.20240314
b9.1.1-beta.20240315
b9.1.1-beta.20240315.1516
b9.1.1-beta.20240317
b9.2.0-beta.20240321
b9.2.0-beta.20240324
b9.2.1-beta.20240331
b9.2.1-beta.20240403
b9.2.1-beta.20240403.1632
b9.2.1-beta.20240403.1708
b9.2.1-beta.20240407
b9.2.1-beta.20240411
b9.2.1-beta.20240414
b9.2.1-beta.20240415
b9.2.1-beta.20240417
b9.2.1-beta.20240417.1115
b9.2.1-beta.20240418
b9.2.1-beta.20240421
b9.2.1-beta.20240422
b9.2.1-beta.20240423
Other
latest-green
test-tag
v10.*
v10.0.0
v10.0.1
v31.*
v31.3.0
v31.3.1
v31.3.2
v32.*
v32.0.0
v32.0.1
v9.*
v9.3.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39001.json"