A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js component.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://gist.github.com/tariqhawis/a8b2c936622c885558173c37df0a77d9 | Exploit Mitigation |
https://gist.github.com/tariqhawis/a8b2c936622c885558173c37df0a77d9 | Exploit Mitigation |
Configurations
History
17 Apr 2025, 13:56
Type | Values Removed | Values Added |
---|---|---|
References | () https://gist.github.com/tariqhawis/a8b2c936622c885558173c37df0a77d9 - Exploit, Mitigation | |
CPE | cpe:2.3:a:aliconnect:software_development_kit:0.0.6:*:*:*:*:*:*:* | |
First Time |
Aliconnect software Development Kit
Aliconnect |
28 Mar 2025, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-03-28 21:15
Updated : 2025-04-17 13:56
NVD link : CVE-2024-24292
Mitre link : CVE-2024-24292
JSON object : View
Products Affected
aliconnect
- software_development_kit
CWE
No CWE.