Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Quick Learn can be tricked into changing core settings

CVE-2024-52441 · published 1 year ago
Summary

The Quick Learn application (versions up to 1.0.1) lets a user supply data that can overwrite internal settings used by the program. This can cause the software to behave in unexpected ways or execute unintended actions. Update to a newer version or apply the vendor’s patch to stop the unsafe data handling.

Original advisory text
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Rajesh Thanoch Quick Learn quick-learn allows Object Injection.This issue affects Quick Le...
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Rajesh Thanoch Quick Learn quick-learn allows Object Injection.This issue affects Quick Learn: from n/a through <= 1.0.1.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-1321Prototype Pollution
Timeline
Published20 Nov 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-52441 · NVD
Track software like this
Free during beta