VDB
BDU%3A2024-05189
BDU%3A2024-05189
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции decodeComponents() декодера URI компонентов decode-uri-component, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ООО «Ред Софт», Fedora Project, Сообщество свободного программного обеспечения, IBM Corp. | РЕД ОС (запись в едином реестре российских программ №3751), Fedora, decode-uri-component, IBM Maximo Application Suite |
Timeline
- Jul 12, 2024 CVE Published
- Aug 15, 2025 CVE Updated
References
- https://github.com/SamVerschueren/decode-uri-component/issues/5 url
- https://github.com/sindresorhus/query-string/issues/345 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERN6YE3DS7NBW7UH44SCJBMNC2NWQ7SM/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAC5KQ2SEWAMQ6UZAUBZ5KXKEOESH375/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW4SCMT3SEUFVIL7YIADQ5K36GJEO6I5/ url
- https://github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9 advisory
- https://github.com/SamVerschueren/decode-uri-component/releases/tag/v0.2.1 advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QABOUA2I542UTANVZIVFKWMRYVHLV32D/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNV2GNZXOTEDAJRFH3ZYWRUBGIVL7BSU/ advisory
- https://www.ibm.com/support/pages/security-bulletin-decode-uri-component-vulnerable-cve-2022-38900-used-ibm-maximo-application-suite advisory
- https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-nodejs-decode-uri-component-cve-2022-38900/?sphrase_id=1203902 advisory