CVE-2024-32866

Summary

CVE-2024-32866 is a vulnerability affecting the Conform type-safe form validation library. Prior to version 1.1.1, Conform permits the parsing of nested objects using the syntax `object.property`. This feature, when mishandled, allows prototype pollution, a type of attack, by an attacker who can provide crafted inputs to `parseWith...` functions. Applications relying on Conform for server-side validation of form data or URL parameters are susceptible to this issue, which has been mitigated in version 1.1.1 with a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.