rjrodger jsonic-next v2.12.1 was discovered to contain a prototype pollution via the function empty. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gist.github.com/mestrtee/9a2b522d59c53f31f45c1edb96459693 | Exploit Third Party Advisory |
| https://gist.github.com/mestrtee/9a2b522d59c53f31f45c1edb96459693 | Exploit Third Party Advisory |
Configurations
History
10 Jul 2025, 22:29
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Richardrodger jsonic
Richardrodger |
|
| References | () https://gist.github.com/mestrtee/9a2b522d59c53f31f45c1edb96459693 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:richardrodger:jsonic:2.12.1:*:*:*:*:*:*:* |
01 Jul 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-01 13:15
Updated : 2025-07-10 22:29
NVD link : CVE-2024-38993
Mitre link : CVE-2024-38993
JSON object : View
Products Affected
richardrodger
- jsonic
CWE
No CWE.