Published: 16/08/2021 Updated: 05/01/2024

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Node.js prior to 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nodejs node.js
netapp snapcenter -
netapp oncommand workflow automation -
netapp oncommand insight -
netapp active iq unified manager -
netapp nextgen api -
oracle peoplesoft enterprise peopletools 8.57
oracle peoplesoft enterprise peopletools 8.58
oracle peoplesoft enterprise peopletools 8.59
oracle graalvm 20.3.3
oracle graalvm 21.2.0
oracle mysql cluster
siemens sinec infrastructure network services

No description is available for this CVE ...

Nodejs before versions 1662, 14175 and 12225 is vulnerable to remote code execution, cross-site scripting and application crashes due to missing input validation of host names returned by Domain Name Servers in the Nodejs DNS library which can lead to output of wrong hostnames (leading to domain hijacking) and injection vulnerabilities in a ...

Critical Infrastructure Sectors: Energy

CWE-20 https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/https://hackerone.com/reports/1178337 https://security.netapp.com/advisory/ntap-20210923-0001/https://www.oracle.com/security-alerts/cpuoct2021.html https://security.netapp.com/advisory/ntap-20211022-0003/https://www.oracle.com/security-alerts/cpujan2022.html https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf https://www.oracle.com/security-alerts/cpujul2022.html https://security.gentoo.org/glsa/202401-02 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2021-22931 https://www.cisa.gov/uscert/ics/advisories/icsa-22-069-09

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-22931

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect