5.3
CVSSv3

CVE-2022-33987

Published: 18/06/2022 Updated: 28/06/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

The got package prior to 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

got project got

Vendor Advisories

Debian Bug report logs - #1013264 node-got: CVE-2022-33987 Package: src:node-got; Maintainer for src:node-got is Debian Javascript Maintainers <pkg-javascript-devel@listsaliothdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Mon, 20 Jun 2022 11:15:02 UTC Severity: important Tags: security R ...
Synopsis Moderate: nodejs:14 security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the nodejs:14 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated ...
Synopsis Moderate: nodejs:14 security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the nodejs:14 module is now available for Red Hat Enterprise Linux 84 Extended Update SupportRed Hat ...
Synopsis Moderate: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon is now availa ...
Synopsis Moderate: nodejs and nodejs-nodemon security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for nodejs and nodejs-nodemon is now available for Red Hat Enterprise Linux 9Red Hat Produ ...
Synopsis Moderate: nodejs:16 security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the nodejs:16 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated ...
The got package before 1210 (also fixed in 1185) for Nodejs allows a redirect to a UNIX socket ...

Github Repositories

Mi pagina web personal, donde comparto lo poco que C :D

Descripción En este proyecto intento plasmar los conocimientos que tengo en el campo de la informática/programación/administración La idea es hacer tutoriales o guías, para poder configurar diferentes herramientas o tecnologías, de esta forma poder ayudar a personas que estén en una situación de querer resolver algo y no