VDB
BDU%3A2024-03121
BDU%3A2024-03121
PUBLISHED
CVSS 4.599999904632568 MEDIUM
Уязвимость клиента HTTP/1.1 undici программной платформы Node.js, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
4.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Fedora Project, Node.js Foundation, ООО «РусБИТех-Астра» | OpenSUSE Leap, openSUSE Tumbleweed, Fedora, SUSE Linux Enterprise Server for SAP Applications, Suse Linux Enterprise Server, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Module for Web Scripting, Undici, Astra Linux Special Edition (запись в едином реестре российских программ №369) |
Timeline
- Apr 19, 2024 CVE Published
- Apr 29, 2025 CVE Updated
References
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQVHWAS6WDXXIU7F72XI55VZ2LTZUB33/ url
- https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18 url
- https://github.com/nodejs/undici/commit/64e3402da4e032e68de46acb52800c9a06aaea3f advisory
- https://github.com/nodejs/undici/commit/6805746680d27a5369d7fb67bc05f95a28247d75 advisory
- https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7 advisory
- https://www.suse.com/security/cve/CVE-2024-30260.html advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P6Q4RGETHVYVHDIQGTJGU5AV6NJEI67E/ advisory