CVE-2024-57077

Summary

CVE-2024-57077 is a newly identified vulnerability affecting the latest version (1.0.8) of the utils-extend library. This issue permits Prototype Pollution attacks through the lib.extend function. An attacker can manipulate Object.prototype setter to introduce or modify properties within the global prototype chain, resulting in denial of service (DoS) as a minimum impact. This vulnerability poses a significant threat, as it allows an attacker to disrupt the normal functionality of affected applications. It is crucial for users of utils-extend to update to a patched version immediately to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.