VDB
BDU%3A2024-03123
BDU%3A2024-03123
PUBLISHED
CVSS 2.0999999046325684 LOW
Уязвимость клиента HTTP/1.1 undici программной платформы Node.js, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
2.0999999046325684
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Fedora Project, Node.js Foundation, ООО «РусБИТех-Астра» | SUSE Linux Enterprise Server for SAP Applications, Suse Linux Enterprise Server, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Module for Web Scripting, SUSE Manager Server, Fedora, Undici, Astra Linux Special Edition (запись в едином реестре российских программ №369) |
Timeline
- Apr 19, 2024 CVE Published
- Apr 29, 2025 CVE Updated
References
- https://hackerone.com/reports/2377760 url
- https://www.suse.com/fr-fr/security/cve/CVE-2024-30261.html url
- https://github.com/nodejs/undici/commit/2b39440bd9ded841c93dd72138f3b1763ae26055 advisory
- https://github.com/nodejs/undici/commit/d542b8cd39ec1ba303f038ea26098c3f355974f3 advisory
- https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQVHWAS6WDXXIU7F72XI55VZ2LTZUB33/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P6Q4RGETHVYVHDIQGTJGU5AV6NJEI67E/ advisory
- https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18 advisory