CVE-2024-57076 Details

A prototype pollution vulnerability has been identified in the ajax-request library, specifically in version 1.2.3. This vulnerability allows attackers to manipulate the global prototype chain by supplying a crafted payload, potentially leading to a denial-of-service condition. The issue arises in the lib.post function, where an attacker can introduce or modify properties that may disrupt the application's normal operation. Furthermore, if the polluted properties are propagated to sensitive Node.js APIs, such as exec or eval, it could enable the execution of arbitrary commands within the application's context.