Логотип exploitDog
bind: "CVE-2024-22020"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2024-22020"

Количество 16

Количество 16

ubuntu логотип

CVE-2024-22020

около 1 года назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2024-22020

около 1 года назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2024-22020

около 1 года назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
EPSS: Низкий
msrc логотип

CVE-2024-22020

6 месяцев назад

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2024-22020

около 1 года назад

A security flaw in Node.js allows a bypass of network import restrict ...

CVSS3: 6.5
EPSS: Низкий
redos логотип

ROS-20240904-05

11 месяцев назад

Уязвимость nodejs

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-ch4x-f5c4-36gv

около 1 года назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2024-06867

около 1 года назад

Уязвимость программной платформы Node.js, связанная с неправильным контролем доступа, позволяющая нарушителю выполнить произвольный код

CVSS3: 6.5
EPSS: Низкий
oracle-oval логотип

ELSA-2024-6148

11 месяцев назад

ELSA-2024-6148: nodejs:18 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-6147

11 месяцев назад

ELSA-2024-6147: nodejs:18 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2542-1

около 1 года назад

Security update for nodejs18

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2496-1

около 1 года назад

Security update for nodejs18

EPSS: Низкий
oracle-oval логотип

ELSA-2024-5815

12 месяцев назад

ELSA-2024-5815: nodejs:20 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-5814

12 месяцев назад

ELSA-2024-5814: nodejs:20 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2574-1

около 1 года назад

Security update for nodejs20

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2543-1

около 1 года назад

Security update for nodejs20

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-22020

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
0%
Низкий
около 1 года назад
redhat логотип
CVE-2024-22020

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
0%
Низкий
около 1 года назад
nvd логотип
CVE-2024-22020

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
0%
Низкий
около 1 года назад
msrc логотип
CVSS3: 6.5
0%
Низкий
6 месяцев назад
debian логотип
CVE-2024-22020

A security flaw in Node.js allows a bypass of network import restrict ...

CVSS3: 6.5
0%
Низкий
около 1 года назад
redos логотип
ROS-20240904-05

Уязвимость nodejs

CVSS3: 6.5
0%
Низкий
11 месяцев назад
github логотип
GHSA-ch4x-f5c4-36gv

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
0%
Низкий
около 1 года назад
fstec логотип
BDU:2024-06867

Уязвимость программной платформы Node.js, связанная с неправильным контролем доступа, позволяющая нарушителю выполнить произвольный код

CVSS3: 6.5
0%
Низкий
около 1 года назад
oracle-oval логотип
ELSA-2024-6148

ELSA-2024-6148: nodejs:18 security update (MODERATE)

11 месяцев назад
oracle-oval логотип
ELSA-2024-6147

ELSA-2024-6147: nodejs:18 security update (MODERATE)

11 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:2542-1

Security update for nodejs18

около 1 года назад
suse-cvrf логотип
SUSE-SU-2024:2496-1

Security update for nodejs18

около 1 года назад
oracle-oval логотип
ELSA-2024-5815

ELSA-2024-5815: nodejs:20 security update (MODERATE)

12 месяцев назад
oracle-oval логотип
ELSA-2024-5814

ELSA-2024-5814: nodejs:20 security update (MODERATE)

12 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:2574-1

Security update for nodejs20

около 1 года назад
suse-cvrf логотип
SUSE-SU-2024:2543-1

Security update for nodejs20

около 1 года назад

Уязвимостей на страницу