High

Analysis Summary

CVE-2024-21512

Node.js MySQL2 module could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw in nestTables. By adding or modifying properties of Object.prototype using a __proto__ or constructor payload, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

Impact

• Code Execution

Indicators of Compromise

CVE

• CVE-2024-21512

Affected Vendors

Remediation

Upgrade to the latest version of MySQL2, available from the MySQL2 GIT Repository.

MySQL2 GIT Repository