CVE-2024-57068

Summary

CVE-2024-57068 is a prototype pollution vulnerability affecting the lib.mutateMergeDeep function in the @tanstack/form-core library version 0.35.0. This issue allows attackers to submit a maliciously crafted payload, leading to a Denial of Service (DoS) condition. The vulnerability arises due to insufficient input validation, enabling an attacker to manipulate the prototype chain and cause unintended behavior. Users are advised to upgrade to a patched version of the library to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.