CVE-2024-57080

Summary

CVE-2024-57080 is a prototype pollution vulnerability affecting the lib.install function in vxe-table version 4.8.10. Attackers can exploit this flaw by supplying a specially crafted payload, leading to a Denial of Service (DoS) condition. The vulnerability arises due to insufficient input validation, enabling an attacker to inject and modify data structures, ultimately causing the application to crash or become unresponsive. This issue poses a significant risk to systems utilizing the affected version of vxe-table and requires immediate attention and patching to mitigate the DoS threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.