Lucene search
GoogleOSV:UBUNTU-CVE-2024-43796HistorySep 10, 2024 - 3:15 p.m.
UBUNTU-CVE-2024-43796
2024-09-1015:15:00
Google
osv.dev
1
ubuntu
express.js
security vulnerability
untrusted input
code execution
patch
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
6.6
Confidence
Low
Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0.
Related
osv
osv
express vulnerable to XSS via response.redirect()
2024-09-10 19:41:04
CGA-jq8v-jx6x-3fpc
2024-09-25 05:27:38
CGA-8w92-879x-f9wc
2024-09-25 05:18:07
debiancve
debiancve
CVE-2024-43796
2024-09-10 15:15:17
vulnrichment
vulnrichment
CVE-2024-43796 express vulnerable to XSS via response.redirect()
2024-09-10 14:36:27
redhatcve
redhatcve
CVE-2024-43796
2024-09-10 16:13:22
nvd
nvd
CVE-2024-43796
2024-09-10 15:15:17
github
github
express vulnerable to XSS via response.redirect()
2024-09-10 19:41:04
cve
cve
CVE-2024-43796
2024-09-10 15:15:17
cvelist
cvelist
CVE-2024-43796 express vulnerable to XSS via response.redirect()
2024-09-10 14:36:27
wolfi
wolfi
CVE-2024-43796 vulnerabilities
2024-09-29 09:21:20
ibm
ibm
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-37f95ce86b)
2024-09-18 00:00:00
Fedora: Security Advisory (FEDORA-2024-0a4a65f805)
2024-09-16 00:00:00
nessus
nessus
Fedora 40 : chromium (2024-0a4a65f805)
2024-09-14 00:00:00
Fedora 39 : chromium (2024-37f95ce86b)
2024-09-18 00:00:00
fedora
fedora
[SECURITY] Fedora 41 Update: chromium-128.0.6613.137-1.fc41
2024-09-18 01:54:49
[SECURITY] Fedora 40 Update: chromium-128.0.6613.137-1.fc40
2024-09-14 02:02:05
[SECURITY] Fedora 39 Update: chromium-128.0.6613.137-1.fc39
2024-09-18 03:35:32
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
6.6
Confidence
Low
Related for OSV:UBUNTU-CVE-2024-43796