CVE-2024-57081 | underscore-contrib 0.3.0 lib.fromQuery prototype pollution

February 6, 2025 Yanac

A vulnerability was found in underscore-contrib 0.3.0. It has been classified as problematic. This affects the function lib.fromQuery. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).

This vulnerability is uniquely identified as CVE-2024-57081. The attack needs to be approached within the local network. There is no exploit available.VulDB Recent EntriesRead More