CVE-2024-36581

EUVD-2024-1946
A Prototype Pollution issue in abw badger-database 1.2.1 allows an attacker to execute arbitrary code via dist/badger-database.esm.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.6 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
prototype_solutionabw_badger_database
𝑥
≤ 1.2.1
ADP
Common Weakness Enumeration
References
https://gist.github.com/mestrtee/f6b2ed1b3b4bc0df994c7455fc6110bd
https://gist.github.com/mestrtee/f6b2ed1b3b4bc0df994c7455fc6110bd