Lucene search
+L

4 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.4 views

SUSE CVE-2021-22939

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted...

4.3CVSS7.4AI score0.1473EPSS
SaveExploits1References15
RedHat Linux
RedHat Linux
added 2021/08/26 10:18 a.m.9 views

nodejs: Incomplete validation of tls rejectUnauthorized parameter

A flaw was found in Node.js. If the Node.js HTTPS API is used incorrectly and "undefined" is passed for the "rejectUnauthorized" parameter, no error is returned, and the connections to servers with an expired certificate are accepted. The highest threat from this vulnerability is to integrity...

5.3CVSS7.3AI score0.1473EPSS
SaveExploits1References5
OSV
OSV
added 2021/08/16 7:15 p.m.2 views

DEBIAN-CVE-2021-22939

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted...

5.3CVSS6.4AI score0.1473EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/08/16 7:15 p.m.6 views

CVE-2021-22939

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted...

5.3CVSS6.7AI score0.1473EPSS
SaveExploits1References10Affected Software1
Rows per page
Query Builder