VDB
BDU%3A2024-05133
BDU%3A2024-05133
PUBLISHED
CVSS 10 CRITICAL
Уязвимость программной платформы Node.js, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнять произвольные команды
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corp, Node.js Foundation | Windows, Node.js |
Timeline
- Jul 9, 2024 CVE Published
References
- https://nodejs.org/en/blog/release/v20.15.1 url
- https://stackdiary.com/node-js-security-release-addresses-high-medium-vulnerabilities/ url
- https://securityonline.info/cve-2024-36138-high-severity-vulnerability-in-node-js-allows-code-execution-on-windows/ url
- https://securityonline.info/major-node-js-security-flaws-millions-of-apps-could-be-vulnerable/ url
- https://nodejs.org/en/blog/vulnerability/july-2024-security-releases advisory