CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

CVE-2020-28168

CVE-2020-28168 affects the Axios NPM package (version 0.21.0). The vulnerability is an SSRF issue where an attacker can bypass a proxy by supplying a URL that responds with a redirect to a restricted host or IP address. The description explicitly ties the SSRF to proxy bypass behavior, outlining ...

CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

CVE-2020-28168

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

PT-2020-6068

Name of the Vulnerable Software and Affected Versions Axios NPM package version 0.21.0 Description The issue is related to insufficient validation of incoming requests in the Axios library, which can be exploited by a remote attacker to perform a Server-Side Request Forgery SSRF attack. This allo...

CVE-2020-28168: Server-Side Request Forgery (SSRF)

Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...

GHSA-8W9J-6WG6-QV4F Malicious Package in axioss

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

Malicious Package in axioss

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

GHSA-R2RG-683G-FF96 Malicious Package in axios-http

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

Malicious Package in axios-http

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

GHSA-WPFC-3W63-G4HM Malicious Package in axois

All versions of axois are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation This package...

Malicious Package in axois

All versions of axois are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation This package...

Malicious Package

axios-http is a malicious package. When the package is installed or required, the package attempts to send hostname information to the attacker's server, affecting confidentiality of the victim's server which can potentially bridges to other attack vectors like remote code execution...

Denial of Service in axios

Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...

GHSA-42XW-2XVC-QX8M Denial of Service in axios

Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...

10chars-test (>=1.0.0, <=1.0.34), 12366.ui-comp (0.0.1) +9588 more potentially affected by CVE-2019-10742 via axios (>=0.1.0, <=0.18.0)

axios NPM version =0.1.0, =1.0.0, =1.0.0, =1.2.0, =1.0.0, =0.3.11, =0.3.3, =0.3.0, =1.0.0-beta.7, =0.1.0, =0.2.1 and more Source cves: CVE-2019-10742 Source advisory: OSV:GHSA-42XW-2XVC-QX8M...

Design/Logic Flaw

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

DEBIAN-CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

UBUNTU-CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...