CVE-2023-38894

Published August 16th, 2023

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code via the extend function.

cronvel/tree-kit

Tree utilities (extend, mask, etc...)

GitHub

29