CVE-2022-33987

Опубликовано: 18 июн. 2022

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

Ссылки

https://github.com/sindresorhus/got/compare/v12.0.3...v12.1.0
Patch
Third Party Advisory
https://github.com/sindresorhus/got/pull/2047
Patch
Third Party Advisory
https://github.com/sindresorhus/got/releases/tag/v11.8.5
Patch
Third Party Advisory
https://github.com/sindresorhus/got/compare/v12.0.3...v12.1.0
Patch
Third Party Advisory
https://github.com/sindresorhus/got/pull/2047
Patch
Third Party Advisory
https://github.com/sindresorhus/got/releases/tag/v11.8.5
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:got_project:got:*:*:*:*:*:node.js:*:*

Версия до 11.8.5 (исключая)

EPSS

Процентиль: 72%

0.00734

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2022-33987

CVSS3: 5.3

ubuntu

около 3 лет назад

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

CVE-2022-33987

CVSS3: 5.3

redhat

около 3 лет назад

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

CVE-2022-33987

CVSS3: 5.3

debian

около 3 лет назад

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allow ...

GHSA-pfrx-2q88-qq97

CVSS3: 5.3

github

около 3 лет назад

Got allows a redirect to a UNIX socket

RLSA-2022:6448

rocky

почти 3 года назад

Moderate: nodejs:14 security and bug fix update

EPSS

Процентиль: 72%

0.00734

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo