VDB
BDU%3A2024-05685
BDU%3A2024-05685
PUBLISHED
CVSS 3.200000047683716 LOW
Record from fstec · Published July 24, 2024
Risk scores
CVSS 2.0
3.200000047683716
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Node.js Foundation, ООО «РусБИТех-Астра» | Node.js, Astra Linux Special Edition (запись в едином реестре российских программ №369) |
Timeline
- Jul 24, 2024 CVE Published
- Jan 31, 2025 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln BDU%3A2024-05685
vulnetix vdb fixes BDU%3A2024-05685
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/BDU%253A2024-05685/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nodejs.org/en/blog/vulnerability/july-2024-security-releases url
- https://www.cybersecurity-help.cz/vdb/SB2024070937 url
- https://www.openwall.com/lists/oss-security/2024/07/19/3 url
- https://www.openwall.com/lists/oss-security/2024/07/11/6 url
- https://www.tenable.com/cve/CVE-2024-36137 url
- https://nodejs.org/en/blog/release/v22.4.1 url
- https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0114SE18MD url
- https://nodejs.org/en/blog/vulnerability/july-2024-security-releases#permission-model-improperly-processes-unc-paths-cve-2024-37372---low advisory
- https://nodejs.org/en/blog/release/v20.15.1 advisory