PT-2024-2194 · Jsonata · Jsonata

Albertspedersen · Published 2024-02-28 · Updated 2025-12-04 · CVE-2024-27307

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JSONata versions 1.4.0 through 1.8.6 JSONata versions 2.0.0 through 2.0.3

Description A malicious expression can use the transform operator to override properties on the Object constructor and prototype, potentially leading to denial of service, remote code execution, or other unexpected behavior in applications that evaluate user-provided JSONata expressions.

Recommendations For JSONata versions 1.4.0 through 1.8.6, update to version 1.8.7 or later to prevent exploitation. For JSONata versions 2.0.0 through 2.0.3, update to version 2.0.4 or later to prevent exploitation. As a temporary workaround, consider applying the manual patch provided to prevent exploitation.

Exploit

Fix

DoS

RCE

Prototype Pollution

Weakness Enumeration

CWE-1321

Related Identifiers

BDU:2024-02116

CVE-2024-27307

GHSA-FQG8-VFV7-8FJ8

Affected Products

Jsonata

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27307.json · Exploit
• https://github.com/jsonata-js/jsonata/commit/335d38f6278e96c908b24183f1c9c90afc8ae00c · Patch
• https://github.com/jsonata-js/jsonata/commit/1d579dbe99c19fbe509f5ba2c6db7959b0d456d1 · Patch
• https://github.com/jsonata-js/jsonata/commit/c907b5e517bb718015fcbd993d742ba6202f2be2 · Patch
• https://github.com/jsonata-js/jsonata/security/advisories/GHSA-fqg8-vfv7-8fj8 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02116 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-27307 · Security Note
• https://osv.dev/vulnerability/CVE-2024-27307 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fqg8-vfv7-8fj8 · Vendor Advisory
• https://github.com/jsonata-js/jsonata · Note
• https://github.com/jsonata-js/jsonata/releases/tag/v2.0.4 · Note
• https://github.com/jsonata-js/jsonata/pull/678 · Note
• https://github.com/jsonata-js/jsonata/pull/681 · Note
• https://github.com/jsonata-js/jsonata/pull/676 · Note
• https://t.me/cvenotify/73175 · Telegram Post