sonatype-2024-2304 Security Details

CVE ID

sonatype-2024-2304

CWE

N/A

CVE Description

cdn.polyfill[.io] supply chain attack

Published

Jun 26, 2024

CVSS Score & Severity

6.9Medium

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N

EPSS Score

0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

Sonatype

References

sansec.ioTHIRD_PARTY

bleepingcomputer.comTHIRD_PARTY