CVE-2024-21512CWE-1321

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when…

High · published May 29, 2024

CVSS v3.1
8.2
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L/E:P
CVSS v4.0
Not supplied
EPSS
0.03139 · 87.8th percentile
Weakness
CWE-1321 · Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Published
2024-05-29T05:00Z
EPSS history
Timeline
  • 29 MAY 05:00Z
    Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when…
    cvelistv5