Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 20

Количество 20

github логотип

GHSA-ch4x-f5c4-36gv

около 2 лет назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2024-22020

около 2 лет назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2024-22020

около 2 лет назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2024-22020

около 2 лет назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
EPSS: Низкий
msrc логотип

CVE-2024-22020

больше 1 года назад

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2024-22020

около 2 лет назад

A security flaw in Node.js allows a bypass of network import restrict ...

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2024-06867

около 2 лет назад

Уязвимость программной платформы Node.js, связанная с неправильным контролем доступа, позволяющая нарушителю выполнить произвольный код

CVSS3: 6.5
EPSS: Низкий
redos логотип

ROS-20240904-05

почти 2 года назад

Уязвимость nodejs

CVSS3: 6.5
EPSS: Низкий
rocky логотип

RLSA-2024:6148

почти 2 года назад

Moderate: nodejs:18 security update

EPSS: Низкий
rocky логотип

RLSA-2024:6147

почти 2 года назад

Moderate: nodejs:18 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-6148

почти 2 года назад

ELSA-2024-6148: nodejs:18 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-6147

почти 2 года назад

ELSA-2024-6147: nodejs:18 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2542-1

около 2 лет назад

Security update for nodejs18

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2496-1

около 2 лет назад

Security update for nodejs18

EPSS: Низкий
rocky логотип

RLSA-2024:5815

почти 2 года назад

Moderate: nodejs:20 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-5815

почти 2 года назад

ELSA-2024-5815: nodejs:20 security update (MODERATE)

EPSS: Низкий
rocky логотип

RLSA-2024:5814

почти 2 года назад

Moderate: nodejs:20 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-5814

почти 2 года назад

ELSA-2024-5814: nodejs:20 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2574-1

около 2 лет назад

Security update for nodejs20

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2543-1

около 2 лет назад

Security update for nodejs20

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-ch4x-f5c4-36gv

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
1%
Низкий
около 2 лет назад
ubuntu логотип
CVE-2024-22020

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
1%
Низкий
около 2 лет назад
redhat логотип
CVE-2024-22020

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
1%
Низкий
около 2 лет назад
nvd логотип
CVE-2024-22020

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
1%
Низкий
около 2 лет назад
msrc логотип
CVE-2024-22020

A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.

CVSS3: 6.5
1%
Низкий
больше 1 года назад
debian логотип
CVE-2024-22020

A security flaw in Node.js allows a bypass of network import restrict ...

CVSS3: 6.5
1%
Низкий
около 2 лет назад
fstec логотип
BDU:2024-06867

Уязвимость программной платформы Node.js, связанная с неправильным контролем доступа, позволяющая нарушителю выполнить произвольный код

CVSS3: 6.5
1%
Низкий
около 2 лет назад
redos логотип
ROS-20240904-05

Уязвимость nodejs

CVSS3: 6.5
1%
Низкий
почти 2 года назад
rocky логотип
RLSA-2024:6148

Moderate: nodejs:18 security update

почти 2 года назад
rocky логотип
RLSA-2024:6147

Moderate: nodejs:18 security update

почти 2 года назад
oracle-oval логотип
ELSA-2024-6148

ELSA-2024-6148: nodejs:18 security update (MODERATE)

почти 2 года назад
oracle-oval логотип
ELSA-2024-6147

ELSA-2024-6147: nodejs:18 security update (MODERATE)

почти 2 года назад
suse-cvrf логотип
SUSE-SU-2024:2542-1

Security update for nodejs18

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:2496-1

Security update for nodejs18

около 2 лет назад
rocky логотип
RLSA-2024:5815

Moderate: nodejs:20 security update

почти 2 года назад
oracle-oval логотип
ELSA-2024-5815

ELSA-2024-5815: nodejs:20 security update (MODERATE)

почти 2 года назад
rocky логотип
RLSA-2024:5814

Moderate: nodejs:20 security update

почти 2 года назад
oracle-oval логотип
ELSA-2024-5814

ELSA-2024-5814: nodejs:20 security update (MODERATE)

почти 2 года назад
suse-cvrf логотип
SUSE-SU-2024:2574-1

Security update for nodejs20

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:2543-1

Security update for nodejs20

около 2 лет назад

Уязвимостей на страницу