Lucene search
+L

4 matches found

SUSE CVE
SUSE CVE
•added 2025/02/14 5:34 a.m.•20 views

SUSE CVE-2024-10491

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

5.3CVSS5.9AI score0.00441EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2024/10/29 5:15 p.m.•22 views

DEBIAN-CVE-2024-10491

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

5.3CVSS5.9AI score0.00441EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2024/10/29 5:15 p.m.•20 views

UBUNTU-CVE-2024-10491

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

5.3CVSS5.9AI score0.00441EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/10/29 12:00 a.m.•13 views

PT-2024-16314

Name of the Vulnerable Software and Affected Versions Express affected versions not specified Description A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from...

5.3CVSS5.8AI score0.00441EPSS
SaveExploits1References16
Rows per page
Query Builder