ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39001.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:ag-grid:ag_charts:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "9.3.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:ag-grid:ag_charts:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.2"
}
],
"source": "CPE_RANGE"
}
]
}
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:ag-grid:ag-grid:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "31.3.4"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:ag-grid:ag-grid:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "32.0.0"
},
{
"fixed": "32.0.2"
}
],
"source": "CPE_RANGE"
}
]
}