PT-2025-5758 · Npm · @Rpldy/Uploader

CVE-2024-57082

·

Published

2025-02-05

·

Updated

2025-02-06

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: @rpldy/uploader version 1.8.1
Description: A prototype pollution in the lib.createUploader function allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
Recommendations: For @rpldy/uploader version 1.8.1, consider disabling the lib.createUploader function until a patch is available to prevent potential Denial of Service (DoS) attacks.

Fix

DoS

Prototype Pollution

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-1321CWE-400

Related Identifiers

CVE-2024-57082
GHSA-PC47-G7GV-4GPW

Affected Products

@Rpldy/Uploader