Lucene search
MitreCVELIST:CVE-2021-29418HistoryMar 30, 2021 - 6:08 a.m.
CVE-2021-29418
2021-03-3006:08:00
mitre
www.cve.org
The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This (in some situations) allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for CVE-2021-28918.
Related
cve
cve
CVE-2021-29418
2021-03-30 07:15:13
CVE-2021-28918
2021-04-01 13:15:14
redhatcve
redhatcve
CVE-2021-29418
2021-03-30 17:56:56
CVE-2021-28918
2021-03-30 18:27:42
osv
osv
CVE-2021-28918
2021-04-01 13:15:14
netmask npm package mishandles octal input data
2021-03-29 21:32:05
CVE-2021-29418
2021-03-30 07:15:13
f5
f5
K25521404 : Node.js netmask vulnerability CVE-2021-28918 and CVE-2021-29418
2021-04-05 00:00:00
nvd
nvd
CVE-2021-29418
2021-03-30 07:15:13
CVE-2021-28918
2021-04-01 13:15:14
prion
prion
Improper access control
2021-03-30 07:15:00
Input validation
2021-04-01 13:15:00
github
github
netmask npm package mishandles octal input data
2021-03-29 21:32:05
Improper parsing of octal bytes in netmask
2021-04-14 15:03:16
veracode
veracode
Server-Side Request Forgery (SSRF)
2021-03-31 02:12:59
Server-Side Request Forgery (SSRF)
2021-03-31 00:33:39
nodejs
nodejs
netmask npm package vulnerable to octal input data
2021-03-29 21:35:07
ibm
ibm
malwarebytes
malwarebytes
The npm netmask vulnerability explained so you can actually understand it
2021-03-31 12:28:16
cvelist
cvelist
CVE-2021-28918
2021-04-01 12:33:50
nuclei
nuclei
Netmask NPM Package - Server-Side Request Forgery
2021-07-06 06:50:43
redhat
redhat
hackerone
hackerone
nessus
nessus
IBM Cognos Analytics Multiple Vulnerabilities (6616285)
2022-09-02 00:00:00