EUVD-2024-53865

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Axios before version 1.7.8 has an issue in origin determination and a potential vulnerability exists.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js modules axios and xml-crypto (CVE-2025-27152, CVE-2025-29774, CVE-2025-29775 and CVE-2024-57965)	16 Apr 202515:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in axios	6 May 202519:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses axios-1.7.7.tgz which is vulnerable to CVE-2024-57965.	23 Jul 202510:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002.	2 May 202507:23	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in axios affects IBM Robotic Process Automation which could result in an unwanted setAttribute('href',href) (CVE-2024-57965)	14 Mar 202521:39	–	ibm
IBM Security Bulletins	Security Bulletin: Axios before 1.7.8 uses setAttribute('href') in isURLSameOrigin.js, raising potential security concern	29 Sep 202507:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in axios affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	7 Aug 202505:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Business Automation Workflow - CVE-2025-27789, CVE-2024-57965, CVE-2025-27152, CVE-2024-55565	3 May 202505:52	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in axios	6 Mar 202520:38	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "a9d161a0-6c46-349d-a334-a1e1e2cf1a49",
        "vendor": {
          "name": "axios"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0570f1a7-d509-3d77-8372-5c6905ab22a6",
        "product": {
          "name": "axios"
        },
        "product_version": "0 <1.7.8"
      }
    ]
  }
]

Source	Link
github	www.github.com/axios/axios/issues/6351
github	www.github.com/axios/axios/releases/tag/v1.7.8
github	www.github.com/axios/axios/commit/0a8d6e19da5b9899a2abafaaa06a75ee548597db
github	www.github.com/axios/axios/pull/6714

03 Oct 2025 20:07Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

EPSS0.00088

SSVC