VDB
GCVE-110-NCSC-2024-466
GCVE-110-NCSC-2024-466
Advisory PublishedCVSS 7.5/10
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Weaknesses (CWE)
CWE-502Deserialization of Untrusted DataCWE-20Improper Input ValidationCWE-347Improper Verification of Cryptographic SignatureCWE-400Uncontrolled Resource ConsumptionCWE-1050Excessive Platform Resource Consumption within a LoopCWE-835Loop with Unreachable Exit Condition ('Infinite Loop')CWE-755Improper Handling of Exceptional ConditionsCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-1333Inefficient Regular Expression Complexity
Risk Scores
CVSS 3.1
7.5/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| atlassian | jira_software | — | — |
| atlassian | atlassian_confluence_data_center__9.0.1 | — | — |
| atlassian | bamboo | — | — |
| atlassian | atlassian_confluence__9.0.1 | — | — |
| atlassian | atlassian_bitbucket__8.19.9 | — | — |
| atlassian | atlassian_bitbucket__8.9.19 | — | — |
| atlassian | sourcetree | — | — |
| atlassian | atlassian_jira_software__9.12.12__lts_ | — | — |
| atlassian | atlassian_jira_software_service_management__5.4.25__lts_ | — | — |
| atlassian | atlassian_confluence__8.5.12 | — | — |
| atlassian | confluence | — | — |
| atlassian | bitbucket | — | — |
| atlassian | atlassian_confluence__8.9.4 | — | — |
| atlassian | atlassian_confluence__7.19.26 | — | — |
| atlassian | atlassian_jira_software__9.4.25__lts_ | — | — |
| atlassian | atlassian_confluence__7.19.26__lts_ | — | — |
| atlassian | atlassian_bamboo__10.0.0 | — | — |
| atlassian | atlassian_bitbucket__9.0.0 | — | — |
| atlassian | atlassian_bamboo__9.2.17 | — | — |
| atlassian | atlassian_confluence__8.5.14__lts_ | — | — |
| atlassian | atlassian_jira_software_data_center__9.17.1 | — | — |
| atlassian | atlassian_jira_software_service_management__5.12.12__lts_ | — | — |
| atlassian | sourcetree_for_mac | — | — |
| atlassian | sourcetree_for_windows | — | — |
| atlassian | atlassian_bamboo__9.6.4 | — | — |
| atlassian | atlassian_jira_software_service_management_data_center__5.17.1 | — | — |
Browse GCVE Records
73,834 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.