CVE-2024-38999

2024-07-0100:00:00

ubuntu.com

jrburke requirejs vulnerability

prototype pollution

arbitrary code execution

denial of service

unix

8.3 High

AI Score

Confidence

High

JSON

jrburke requirejs v2.3.6 was discovered to contain a prototype pollution
via the function s.contexts._.configure. This vulnerability allows
attackers to execute arbitrary code or cause a Denial of Service (DoS) via
injecting arbitrary properties.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchrequirejs< anyUNKNOWN
ubuntu20.04noarchrequirejs< anyUNKNOWN
ubuntu22.04noarchrequirejs< anyUNKNOWN
ubuntu23.10noarchrequirejs< anyUNKNOWN
ubuntu24.04noarchrequirejs< anyUNKNOWN
ubuntu16.04noarchrequirejs< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	requirejs	< any	UNKNOWN
ubuntu	20.04	noarch	requirejs	< any	UNKNOWN
ubuntu	22.04	noarch	requirejs	< any	UNKNOWN
ubuntu	23.10	noarch	requirejs	< any	UNKNOWN
ubuntu	24.04	noarch	requirejs	< any	UNKNOWN
ubuntu	16.04	noarch	requirejs	< any	UNKNOWN