VDB
BDU%3A2024-02261
BDU%3A2024-02261
PUBLISHED
CVSS 10 CRITICAL
Уязвимость утилиты node-ip программной платформы Node.js, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Red Hat, Inc., Elastic NV, АО «НППКТ» | Debian GNU/Linux, Red Hat 3scale API Management Platform, Openshift Service Mesh, Red Hat Openshift Data Foundation, Red Hat OpenShift GitOps, Red Hat OpenShift Data Science (RHODS), Node HealthCheck Operator, Network Observability Operator, Migration Toolkit for Virtualization, Red Hat Discovery, Red Hat Advanced Cluster Security, Red Hat OpenShift Dev Spaces, Red Hat Developer Hub, Kibana, node-ip, ОСОН ОСнова 3 Оnyx | |
| Сообщество свободного программного обеспечения, Red Hat Inc., Elastic NV | Debian GNU/Linux, Red Hat 3scale API Management Platform, Openshift Service Mesh, Red Hat Openshift Data Foundation, Red Hat OpenShift GitOps, Red Hat OpenShift Data Science (RHODS), Node HealthCheck Operator, Network Observability Operator, Migration Toolkit for Virtualization, Red Hat Discovery, Red Hat Advanced Cluster Security, Red Hat OpenShift Dev Spaces, Red Hat Developer Hub, Kibana, node-ip |
Timeline
- Mar 22, 2024 CVE Published
- Sep 23, 2026 CVE Updated
References
- https://security-tracker.debian.org/tracker/CVE-2023-42282 advisory
- https://access.redhat.com/security/cve/CVE-2023-42282 advisory
- https://github.com/indutny/node-ip/commit/6a3ada9b471b09d5f0f5be264911ab564bf67894 advisory
- https://cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.html url
- https://huntr.com/bounties/bfc3b23f-ddc0-4ee7-afab-223b07115ed3/ url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/3.2/ url