Node.js -- July 7th 2022 Security Releasesentered 2022-07-08
no CVE referenced
CVE details
CVE-2022-32212
A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.
- Score
- 8.1 high
- Published
- 2022-07-14
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.