VDB
BDU%3A2024-04278
BDU%3A2024-04278
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость промежуточного программного обеспечения для фреймфорка Express Webpack-dev-middleware, связана с недостаточной проверкой URL-адреса, позволяющая получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения | Webpack-dev-middleware |
Timeline
- May 31, 2024 CVE Published
- Dec 17, 2025 CVE Updated
References
- https://vuldb.com/pt/?id.257628 url
- https://github.com/webpack/webpack-dev-middleware/blob/7ed24e0b9f53ad1562343f9f517f0f0ad2a70377/src/utils/getFilenameFromUrl.js#L82 url
- https://github.com/webpack/webpack-dev-middleware/blob/7ed24e0b9f53ad1562343f9f517f0f0ad2a70377/src/utils/setupOutputFileSystem.js#L21 url
- https://github.com/webpack/webpack-dev-middleware/commit/189c4ac7d2344ec132a4689e74dc837ec5be0132 url
- https://github.com/webpack/webpack-dev-middleware/commit/9670b3495da518fe667ff3428c5e4cb9f2f3d353 url
- https://github.com/webpack/webpack-dev-middleware/commit/e10008c762e4d5821ed6990348dabf0d4d93a10e url
- https://github.com/webpack/webpack-dev-middleware/releases/tag/v5.3.4 url
- https://github.com/webpack/webpack-dev-middleware/releases/tag/v6.1.2 url
- https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.1.0 url
- https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-wr3j-pwj9-hqq6 advisory