Aliconnect

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Aliconnect records in CISA KEV

No Aliconnect vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Software Development Kit · all components

TI-2024-16064 CVE-2024-24292 · GHSA-798j-m949-2j7c

HIGH 82

A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00785 Published 2025-03-28 No fix listed CWE-1321