[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DNS rebinding vulnerability in Node.js - CVE-2022-43548

ID: oval:org.secpod.oval:def:85377Date: (C)2022-11-08   (M)2024-05-22
Class: VULNERABILITYFamily: macos




The host is installed with Node.js 14.x before 14.21.1, 16.x before 16.18.1, 18.x before 18.12.1 or 19.x before 19.0.1 and is prone to a DNS rebinding vulnerability. A flaw is present in the application, which fails to handle invalid IP addresses. On successful exploitation, an attacker can perform DNS rebinding and execute arbitrary code.

Platform:
Apple Mac OS 14
Apple Mac OS 13
Apple Mac OS X 10.11
Apple Mac OS X 10.12
Apple Mac OS X 10.13
Apple Mac OS X 10.14
Apple Mac OS X 10.15
Apple Mac OS 11
Apple Mac OS 12
Product:
Node.js
Reference:
CVE-2022-43548
CVE    1
CVE-2022-43548

© SecPod Technologies