cve/2024/CVE-2024-36572.md
2024-08-05 18:41:32 +00:00

720 B

CVE-2024-36572

Description

Prototype pollution in allpro form-manager 0.7.4 allows attackers to run arbitrary code and cause other impacts via the functions setDefaults, mergeBranch, and Object.setObjectValue.

POC

Reference

Github

No PoCs found on GitHub currently.