Description
ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
Recommendation
Update the ag-grid-enterprise package to the latest compatible version. Followings are version details:
Affected version(s): **< 31.3.4 = 32.0.0** Patched version(s): **31.3.4 32.0.1**
References
Could your website be exposed too?
SmartScanner can check your website for ag-grid packages vulnerable to Prototype Pollution - ag-grid-enterprise and gives you actionable findings to investigate.
Start a free scanRelated Issues
- ag-grid packages vulnerable to Prototype Pollution - @ag-grid-enterprise/charts - CVE-2024-39001
- ag-grid packages vulnerable to Prototype Pollution - CVE-2024-39001
- Prototype pollution in ag-grid-community via the _.mergeDeep function - ag-grid-enterprise - CVE-2024-38996
- depath and cool-path vulnerable to Prototype Pollution via `set()` Method - CVE-2024-38985
You might also like:
See something that needs correcting? Let us knowUpdated August 26, 2024