Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-43799

Опубликовано: 10 сент. 2024
Источник: nvd
CVSS3: 5
CVSS3: 4.7
EPSS Низкий

Описание

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:send_project:send:*:*:*:*:*:node.js:*:*
Версия до 0.19.0 (исключая)

EPSS

Процентиль: 31%
0.00118
Низкий

5 Medium

CVSS3

4.7 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5
ubuntu
больше 1 года назад

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.

CVSS3: 5
redhat
больше 1 года назад

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.

CVSS3: 4.7
msrc
около 1 года назад

send vulnerable to template injection that can lead to XSS

CVSS3: 5
debian
больше 1 года назад

Send is a library for streaming files from the file system as a http r ...

CVSS3: 5
github
больше 1 года назад

send vulnerable to template injection that can lead to XSS

EPSS

Процентиль: 31%
0.00118
Низкий

5 Medium

CVSS3

4.7 Medium

CVSS3

Дефекты

CWE-79