Skip to main content

Ag Grid

2 CVEs product

Monthly

CVE-2024-39001 Jul 01, 13:15 npm MEDIUM POC PATCH This Month

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Prototype Pollution Ag Grid Ag Charts
NVD GitHub
CVSS 3.1
6.3
EPSS
0.8%
CVE-2024-38996 Jul 01, 13:15 npm CRITICAL POC PATCH Act Now

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Prototype Pollution Ag Grid
NVD GitHub
CVSS 3.1
9.8
EPSS
1.2%
EPSS 1% CVSS 6.3
MEDIUM POC PATCH This Month

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Prototype Pollution +2
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL POC PATCH Act Now

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Prototype Pollution +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy