Improper Input Validation

🗓️ 10 Oct 2023 05:41:05Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 48 Views

postcss vulnerability improper input validation carriage return ris

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion may be vulnerable to Injection, Regular Expression Denial of Service (ReDoS), and Arbitrary Code Execution and via use of postcss, semver, babel-traverse (CVE-2023-45133, CVE-2022-25883, CVE-2023-44270)	16 Nov 202321:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM includes components with known vulnerabilities	12 Apr 202415:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities	14 Feb 202418:50	–	ibm
IBM Security Bulletins	Security Bulletin: postcss-8.4.14.tgz is vulnerable to CVE-2023-44270 used in IBM Maximo Application Suite - Edge Data Collector	5 Mar 202409:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookie might affect IBM Storage Defender Copy Data Management	12 Dec 202515:25	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 May 202410:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in PostCSS	29 Nov 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2024.	15 Apr 202502:17	–	ibm
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to security restrictions bypass due to PostCSS CVE-2023-44270	5 Dec 202310:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Network Threat Analytics app for IBM QRadar SIEM includes components with known vulnerabilities	22 Jul 202515:48	–	ibm

Vulners

Node

node-postcss node-postcssMatch7.0.34-1debian

AND

debian debian_linuxMatch999

node-postcss node-postcssMatch8.2.1+~cs5.3.23-5debian

AND

node-postcss node-postcssMatch7.0.34-1debian

AND

debian debian_linuxMatch11

postcss postcssRange3.0.5–8.4.30js

Source	Link
github	www.github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5
github	www.github.com/postcss/postcss/releases/tag/8.4.31
github	www.github.com/advisories/GHSA-7fh5-64p2-3v2j
github	www.github.com/github/advisory-database/issues/2820
github	www.github.com/postcss/postcss/blob/main/lib/tokenize.js

13 Oct 2023 10:16Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.3

EPSS0.00166

SSVC