Lucene search

K
cbl_marinerCBL MarinerCBLMARINER:37115
HistoryJun 21, 2024 - 9:32 a.m.

CVE-2024-28863 affecting package nodejs for versions less than 20.14.0-1

2024-06-2109:32:44
CBL Mariner
6
cve-2024-28863
package nodejs
security issue
upgraded version
unix

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

CVE-2024-28863 affecting package nodejs for versions less than 20.14.0-1. An upgraded version of the package is available that resolves this issue.

OSVersionArchitecturePackageVersionFilename
Azure Linux3.0allnodejs< 20.14.0-1UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low