VDB
CVE-2024-21890
CVE-2024-21890
PUBLISHED
EPSS 1.44% · 81.1th percentile
Risk Scores
EPSS Score
1.44%
81.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amazon | nodejs20 |
Exploit Intelligence
- Improper handling of wildcards in --allow-fs-read and --allow-fs-write (hackerone)
- Improper handling of wildcards in --allow-fs-read and --allow-fs-write (hackerone)
- Improper handling of wildcards in --allow-fs-read and --allow-fs-write (hackerone)
- Improper handling of wildcards in --allow-fs-read and --allow-fs-write (hackerone)
- Improper handling of wildcards in --allow-fs-read and --allow-fs-write (hackerone)
- Improper handling of wildcards in --allow-fs-read and --allow-fs-write (hackerone)
- https://hackerone.com/reports/2257156 (osv)
- GenerationConfig.java (github-poc)
- SelfAdaptationGenerationConfig.java (github-poc)
- GenerationConfig.java (github-poc)
…and 21 more exploits
Timeline
- CVE Published
- Feb 15, 2024 PoC Published
- Feb 20, 2024 EPSS Score
- Mar 18, 2024 EPSS Score
- Apr 14, 2024 EPSS Score
- May 10, 2024 EPSS Score
- May 29, 2024 PoC Published
- Jun 7, 2024 EPSS Score
- Jul 4, 2024 EPSS Score
- Jul 31, 2024 EPSS Score
- Aug 27, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score