cesarbtakeda/pp_cve-2024-38998Analyzes CVE-2024-38998, a prototype pollution vulnerability in requirejs 2.3.6, demonstrating how malicious config inputs can lead to DoS, RCE, or XSS.
A vulnerability (CVE-2024-38998) was identified in version 2.3.6 of the requirejs JavaScript module. It exploits prototype pollution in the config function, allowing attackers to modify Object.prototype with malicious inputs. This can cause DoS, remote code execution (RCE), or XSS. The severity is critical (CVSS 9.8). Prototype Pollution
