VDB

BDU%3A2024-02114

BDU%3A2024-02114 PUBLISHED CVSS 7.5 HIGH

Уязвимость функции url.parse() модуля Node.js follow-redirects, позволяющая нарушителю проводить фишинг-атаки

Risk Scores

CVSS 2.0
7.5

Affected Products

VendorProductVersions
Red Hat Inc., Сообщество свободного программного обеспечения, Fedora Project, Elastic NVJboss Fuse, Debian GNU/Linux, JBoss Data Grid, Red Hat Quay, Red Hat Process Automation, Red Hat Integration Camel K, Red Hat Integration Service Registry, Openshift Service Mesh, Red Hat Data Grid, Red Hat Openshift Data Foundation, Red Hat Advanced Cluster Management for Kubernetes, Red Hat OpenShift GitOps, Red Hat OpenShift Container Platform, Red Hat Migration Toolkit for Containers, Decision Manager, Fedora, Red Hat OpenShift Data Science (RHODS), Node HealthCheck Operator, Migration Toolkit for Virtualization, Red Hat OpenShift Virtualization, Red Hat Discovery, Cryostat, Red Hat build of OptaPlanner, Red Hat Advanced Cluster Security, Red Hat OpenShift Dev Spaces, OpenShift Pipelines, Red Hat Developer Hub, Migration Toolkit for Applications, Migration Toolkit for Runtimes, Network Observability Operator, Red Hat OpenShift distributed tracing, follow-redirects, Kibana

Timeline

  • Mar 19, 2024 CVE Published
  • Mar 22, 2024 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›