cve/2024/CVE-2024-21512.md

CVE-2024-21512

Description

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.

POC

Reference

• https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-7176010
• https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-7176010
• https://security.snyk.io/vuln/SNYK-JS-MYSQL2-6861580
• https://security.snyk.io/vuln/SNYK-JS-MYSQL2-6861580

Github

• https://github.com/wy876/POC
• https://github.com/wy876/wiki