VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Sep 10, 2024· Updated Jun 17, 2026

CVE-2024-45597

CVE-2024-45597

Description

Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. Scripts passing user-controlled values to http.request header values are affected. An attacker could use this to send arbitrary requests, potentially leveraging authentication tokens provided in the same headers table.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Pluto Lang/Pluto
    cpe:2.3:a:pluto-lang:pluto:*:*:*:*:*:*:*:*
    Range: >=0.9.0,<0.9.5
  • Plutolang/Plutollm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: >= 0.9.0, <= 0.9.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.