CVE-2024-32866
CVSS 3.1 Score 8.6 of 10 (high)
Details
Summary
CVE-2024-32866, a vulnerability in Conform, a type-safe form validation library, allows the parsing of nested objects. Prior to version 1.1.1, an improper implementation of this feature can be exploited by an attacker to trigger prototype pollution through crafted input. This vulnerability affects applications that use Conform for server-side validation of form data or URL parameters. The issue has been patched in version 1.1.1, and the risk score is 65 out of 100 with a base severity rating of HIGH and an exploitability score of 3.9 out of 10. The impact includes low integrity and confidentiality impacts, but high availability impact.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions