CVE-2024-39001

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-39001
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39001.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-39001
Aliases
Related
Published
2024-07-01T13:15:05.397Z
Modified
2026-03-15T14:52:54.059277Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

References

Affected packages

Git / github.com/ag-grid/ag-charts

Affected ranges

Type
GIT
Repo
https://github.com/ag-grid/ag-charts
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
368996aa1cb14afad6d66be8815be08dd34f3085
Introduced
82ca23caf59b2b605a5c08f90386da2203ea959f
Fixed
fa34f900f89f2c3b396fc4814897185f699d07ed
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "9.3.2"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.2"
        }
    ]
}
Type
GIT
Repo
https://github.com/ag-grid/ag-grid
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b632ff58db83fd24454dd027a676541581645c4b
Introduced
109f7cc0514ada6ebe1a63aaf6381ea464d281d1
Fixed
3995120e35972d65b5436f50e055b16038e119a0
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "31.3.4"
        },
        {
            "introduced": "32.0.0"
        },
        {
            "fixed": "32.0.2"
        }
    ]
}

Affected versions

v10.*
v10.0.0
v10.0.1
v32.*
v32.0.0
v32.0.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39001.json"