CVE-2018-12123

🗓️ 28 Nov 2018 17:00:00Reported by nodejsType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 223 Views

Node.js: Hostname spoofing in URL parser for javascript protoco

Reporter	Title	Published	Views	Family All 117
ibm	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - Node.js	11 Mar 201914:55	–	ibm
ibm	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management V2018	13 May 201923:35	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software	29 Jan 201921:10	–	ibm
ibm	Security Bulletin: API Connect is impacted by multiple nodeJS vulnerabilities (CVE-2018-12122 CVE-2018-12121 CVE-2018-12123 CVE-2018-12116)	27 Mar 201922:45	–	ibm
ibm	Security Bulletin: IBM Event Streams is affected by Node.js vulnerabilities	29 Mar 201910:50	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud Transformation Advisor	5 Dec 202219:00	–	ibm
ibm	Security Bulletin: IBM Planning Analytics Local is affected by multiple vulnerabilities (CVE-2018-12116, CVE-2018-12121, CVE-2018-12122, CVE-2018-12123)	15 Apr 201915:25	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway	20 Feb 201918:30	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management V2018	3 May 201914:35	–	ibm

NVD

Node

nodejs node.jsRange6.0.0–6.15.0lts

nodejs node.jsRange8.0.0–8.14.0lts

nodejs node.jsRange10.0.0–10.14.0lts

nodejs node.jsRange11.0.0–11.3.0-

[
  {
    "product": "Node.js",
    "vendor": "The Node.js Project",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2019:1821
security	www.security.gentoo.org/glsa/202003-48
nodejs	www.nodejs.org/en/blog/vulnerability/november-2018-security-releases/
security	www.security.netapp.com/advisory/ntap-20241213-0008/

17 Jun 2026 01:37Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.14.3

CVSS 24.3

EPSS0.0405