Beveiligingsadvies

CVE-2022-32212

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-07-14 00:00:00

Laatst bijgewerkt 2025-04-30 22:24:44

Toegewezen door hackerone

CVSS-score geen score

Status PUBLISHED

Beschrijving

A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.

← Alle CVE's bekijken Bekijk op cve.org ↗