CVE-2020-24025

🗓️ 28 Jan 2021 18:56:15Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 139 Views

Flaw in node-sass certificate validatio

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: IBM QRadar Deployment Intelligence app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 May 202218:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System.	16 Aug 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	30 Mar 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202317:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vunerable to libsass and node-sass vulnerabilities	6 Dec 202316:20	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
Broadcom	Certificate validation is disabled when requesting binaries	12 Jun 202300:00	–	broadcom
CBLMariner	CVE-2020-24025 affecting package reaper for versions less than 3.1.1-9	6 Jun 202419:53	–	cbl_mariner
Circl	CVE-2020-24025	11 Jan 202122:46	–	circl
CNNVD	Sass Node-sass Trust Management Issues Vulnerability	11 Jan 202100:00	–	cnnvd

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-24025
github	www.github.com/sass/node-sass/issues/3067
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

20 Apr 2024 00:33Current

3.1Low risk

Vulners AI Score3.1

CVSS 25

CVSS 3.15.3

EPSS0.00305

nodejs node-sass certificate validation