PT-2024-36694 · Unknown · Mighty Digital Partners

Le Ngoc Anh · Published 2024-12-18 · Updated 2024-12-18 · CVE-2024-56059

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mighty Digital Partners versions n/a through 0.2.0

Description The issue is related to an Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution', which allows Object Injection. This enables attackers to perform certain actions on the affected system.

Recommendations For versions n/a through 0.2.0, update to a version that fixes the 'Prototype Pollution' vulnerability to prevent Object Injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Prototype Pollution

Weakness Enumeration

CWE-1321

Related Identifiers

CVE-2024-56059

Affected Products

Mighty Digital Partners

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-56059 · Security Note
• https://twitter.com/VulmonFeeds/status/1869360668685541651 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/partners/vulnerability/wordpress-partners-plugin-0-2-0-php-object-injection-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/partners/vulnerability/wordpress-partners-plugin-0-2-0-php-object-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1869349566492913964 · Twitter Post
• https://t.me/cvedetector/13181 · Telegram Post
• https://twitter.com/CveFindCom/status/1869352246300794997 · Twitter Post