CRITICAL🇵🇱 Wersja polska

CVE-2024-24292

CVSS 9.8v3.1pub. 2025-03-28upd. 2025-04-17

A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js component.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Aliconnect Software Development Kit

    APP
    Aliconnect
    0.0.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References