Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ch4x-f5c4-36gv

Опубликовано: 09 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

EPSS

Процентиль: 28%
0.00098
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-284
CWE-94

Связанные уязвимости

CVSS3: 6.5
ubuntu
12 месяцев назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
redhat
12 месяцев назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
nvd
12 месяцев назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
msrc
4 месяца назад

Описание отсутствует

CVSS3: 6.5
debian
12 месяцев назад

A security flaw in Node.js allows a bypass of network import restrict ...

EPSS

Процентиль: 28%
0.00098
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-284
CWE-94