Lucene search

K
cvelistMitreCVELIST:CVE-2023-42282
HistoryFeb 08, 2024 - 12:00 a.m.

CVE-2023-42282

2024-02-0800:00:00
mitre
www.cve.org
2
node.js
ssrf
ip package

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.