critical9.8
CVE-2024-36572
Prototype pollution in allpro form-manager 0.7.4 allows attackers to run arbitrary code and cause other impacts via the functions setDefaults, mergeBranch, and…
Impact
Prototype pollution in allpro form-manager 0.7.4 allows attackers to run arbitrary code and cause other impacts via the functions setDefaults, mergeBranch, and Object.setObjectValue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allpro | Formmanager Data Handler | Version 0.7.4 |