CVE-2020-28469

Опубликовано: 03 июн. 2021

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

Ссылки

https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9
Broken Link
https://github.com/gulpjs/glob-parent/pull/36
Patch
Third Party Advisory
https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2
Release Notes
Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093
Exploit
Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092
Exploit
Third Party Advisory
https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905
Exploit
Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html
Patch
Third Party Advisory
https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9
Broken Link
https://github.com/gulpjs/glob-parent/pull/36
Patch
Third Party Advisory
https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2
Release Notes
Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093
Exploit
Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092
Exploit
Third Party Advisory
https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905
Exploit
Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gulpjs:glob-parent:*:*:*:*:*:node.js:*:*

Версия до 5.1.2 (исключая)

Конфигурация 2

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00625

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

CVE-2020-28469

CVSS3: 5.3

ubuntu

около 4 лет назад

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

CVE-2020-28469

CVSS3: 7.5

redhat

больше 4 лет назад

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

CVE-2020-28469

CVSS3: 5.3

debian

около 4 лет назад

This affects the package glob-parent before 5.1.2. The enclosure regex ...

GHSA-ww39-953v-wcq6

CVSS3: 7.5

github

около 4 лет назад

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

RLSA-2021:5171

rocky

больше 3 лет назад

Moderate: nodejs:16 security, bug fix, and enhancement update

EPSS

Процентиль: 69%

0.00625

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400