EUVD-2022-1677

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Moment.js has a path traversal vulnerability affecting versions 1.0.1 to 2.29.1, patched in 2.29.2.

Reporter	Title	Published	Views	Family All 166
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	16 May 202420:23	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Deployment Intelligence App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2022-25881, CVE-2021-23440, CVE-2022-24785, CVE-2022-46175)	6 Jun 202320:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to a path traversal vulnerablity in Moment.js (CVE-2022-24785)	1 Nov 202319:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	27 Jun 202422:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.0.1	16 Nov 202315:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jQuery, Moment, Jackson-mapper-asl and Red Hat JBoss Enterprise Application Platform might affect IBM Storage Defender Copy Data Management.	16 May 202519:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2022-31129, CVE-2022-24785	27 Mar 202317:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM B2B Advanced Communications is affected by multiple vulnerabilities in log4j	13 Jan 202612:56	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities in moment, ansi-regex, Node.js, and minimatch may affect IBM Spectrum Protect Client and IBM Spectrum Protect for Space Management (CVE-2022-31129, CVE-2022-24785, CVE-2021-3807, CVE-2022-29244, CVE-2022-3517)	17 Mar 202309:26	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in moment.js used by IBM QRadar User Behavior Analytics (CVE-2022-24785)	29 Sep 202214:05	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "21624d91-468d-331c-b2ca-e530550b9c3e",
        "vendor": {
          "name": "moment"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "c89b81a6-2eca-3670-9ec0-2c51229ca1c2",
        "product": {
          "name": "moment"
        },
        "product_version": "1.0.1, < 2.29.2"
      }
    ]
  }
]

Source	Link
github	www.github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24785
github	www.github.com/moment/moment/commit/4211bfc8f15746be4019bba557e29a7ba83d54c5
github	www.github.com/moment/moment
lists	www.lists.debian.org/debian-lts-announce/2023/01/msg00035.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5
security	www.security.netapp.com/advisory/ntap-20220513-0006
tenable	www.tenable.com/security/tns-2022-09
access	www.access.redhat.com/errata/RHSA-2022:1681

03 Oct 2025 20:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

CVSS 25

EPSS0.01827

SSVC