Depath
1 CVEs
product
Monthly
janryWang products depath v1.0.6 and cool-path v1.1.2 were discovered to contain a prototype pollution via the set() method at setIn (lib/index.js:90). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Prototype Pollution
RCE
Denial Of Service
Depath
NVD
GitHub
CVSS 3.1
9.8
EPSS
1.2%
CVE-2024-38985
EPSS 1%
CVSS 9.8
CRITICAL
POC
Act Now
janryWang products depath v1.0.6 and cool-path v1.1.2 were discovered to contain a prototype pollution via the set() method at setIn (lib/index.js:90). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Prototype Pollution
RCE
Denial Of Service
+1
NVD
GitHub