Cross Site Scripting (XSS)

🗓️ 29 Nov 2023 10:20:34Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

Node.js vulnerable to XSS through WebAssembly module

Reporter	Title	Published	Views	Family All 163
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to security restrictions bypass due to [CVE-2023-38552], [CVE-2023-39333]	14 Dec 202310:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.14 and earlier	19 Jan 202418:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Voice Gateway	16 Nov 202314:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	17 Sep 202417:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	17 Jan 202407:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for November 2023.	26 Mar 202504:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	6 Dec 202316:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local - Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	7 May 202419:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node.js	11 Dec 202309:42	–	ibm
Tenable Nessus	Amazon Linux 2023 : nodejs, nodejs-devel, nodejs-full-i18n (ALAS2023-2023-412)	4 Nov 202300:00	–	nessus

Vulners

Node

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch999

nodejs nodejsMatch18.16.0-r1os

AND

nodejs nodejsMatch18.17.1-r0os

AND

nodejs nodejsMatch18.17.0-r0os

AND

nodejs nodejsMatch18.16.1-r0os

AND

alpinelinux alpine_linuxMatch3.18

nodejs-current nodejs-currentMatch15.12.0-r0os

AND

nodejs-current nodejs-currentMatch20.0.0-r1os

AND

nodejs-current nodejs-currentMatch18.9.0-r0os

AND

nodejs-current nodejs-currentMatch17.0.1-r0os

AND

nodejs-current nodejs-currentMatch20.8.0-r0os

AND

nodejs-current nodejs-currentMatch16.4.0-r0os

AND

nodejs-current nodejs-currentMatch13.13.0-r0os

AND

nodejs-current nodejs-currentMatch14.1.0-r0os

AND

nodejs-current nodejs-currentMatch16.6.1-r0os

AND

nodejs-current nodejs-currentMatch18.10.0-r0os

AND

nodejs-current nodejs-currentMatch19.7.0-r0os

AND

nodejs-current nodejs-currentMatch18.7.0-r0os

AND

nodejs-current nodejs-currentMatch20.1.0-r1os

AND

nodejs-current nodejs-currentMatch18.7.0-r2os

AND

nodejs-current nodejs-currentMatch20.5.1-r0os

AND

nodejs-current nodejs-currentMatch19.6.0-r0os

AND

nodejs-current nodejs-currentMatch18.1.0-r0os

AND

nodejs-current nodejs-currentMatch16.11.1-r1os

AND

nodejs-current nodejs-currentMatch13.12.0-r1os

AND

nodejs-current nodejs-currentMatch16.10.0-r0os

AND

nodejs-current nodejs-currentMatch14.0.0-r0os

AND

nodejs-current nodejs-currentMatch17.4.0-r0os

AND

nodejs-current nodejs-currentMatch17.5.0-r1os

AND

nodejs-current nodejs-currentMatch14.2.0-r0os

AND

nodejs-current nodejs-currentMatch19.4.0-r0os

AND

nodejs-current nodejs-currentMatch18.0.0-r1os

AND

nodejs-current nodejs-currentMatch18.6.0-r0os

AND

nodejs-current nodejs-currentMatch15.13.0-r0os

AND

nodejs-current nodejs-currentMatch20.5.0-r0os

AND

nodejs-current nodejs-currentMatch18.9.1-r0os

AND

nodejs-current nodejs-currentMatch13.1.0-r0os

AND

nodejs-current nodejs-currentMatch18.8.0-r0os

AND

nodejs-current nodejs-currentMatch17.7.1-r0os

AND

nodejs-current nodejs-currentMatch19.9.0-r0os

AND

nodejs-current nodejs-currentMatch20.3.0-r0os

AND

nodejs-current nodejs-currentMatch17.3.0-r0os

AND

nodejs-current nodejs-currentMatch17.3.1-r0os

AND

nodejs-current nodejs-currentMatch16.0.0-r0os

AND

nodejs-current nodejs-currentMatch19.8.0-r0os

AND

nodejs-current nodejs-currentMatch18.11.0-r0os

AND

nodejs-current nodejs-currentMatch16.2.0-r0os

AND

nodejs-current nodejs-currentMatch16.9.1-r0os

AND

nodejs-current nodejs-currentMatch19.0.0-r1os

AND

nodejs-current nodejs-currentMatch16.5.0-r0os

AND

nodejs-current nodejs-currentMatch13.11.0-r0os

AND

nodejs-current nodejs-currentMatch17.7.2-r0os

AND

nodejs-current nodejs-currentMatch16.8.0-r0os

AND

nodejs-current nodejs-currentMatch16.4.2-r0os

AND

nodejs-current nodejs-currentMatch18.5.0-r0os

AND

nodejs-current nodejs-currentMatch16.7.0-r0os

AND

nodejs-current nodejs-currentMatch20.4.0-r0os

AND

nodejs-current nodejs-currentMatch19.2.0-r0os

AND

nodejs-current nodejs-currentMatch19.1.0-r0os

AND

nodejs-current nodejs-currentMatch16.1.0-r0os

AND

nodejs-current nodejs-currentMatch17.2.0-r0os

AND

nodejs-current nodejs-currentMatch19.3.0-r0os

AND

nodejs-current nodejs-currentMatch20.6.1-r0os

AND

nodejs-current nodejs-currentMatch18.2.0-r0os

AND

nodejs-current nodejs-currentMatch16.6.2-r0os

AND

nodejs-current nodejs-currentMatch20.6.0-r0os

AND

nodejs-current nodejs-currentMatch18.4.0-r0os

AND

nodejs-current nodejs-currentMatch20.3.1-r0os

AND

nodejs-current nodejs-currentMatch17.8.0-r0os

AND

nodejs-current nodejs-currentMatch17.6.0-r0os

AND

nodejs-current nodejs-currentMatch18.3.0-r0os

AND

nodejs-current nodejs-currentMatch20.7.0-r0os

AND

nodejs-current nodejs-currentMatch20.5.0-r2os

AND

nodejs-current nodejs-currentMatch20.0.0-r0os

AND

nodejs-current nodejs-currentMatch14.3.0-r0os

AND

nodejs-current nodejs-currentMatch20.2.0-r0os

AND

nodejs-current nodejs-currentMatch15.11.0-r0os

AND

nodejs-current nodejs-currentMatch13.12.0-r0os

AND

nodejs-current nodejs-currentMatch19.0.1-r0os

AND

nodejs-current nodejs-currentMatch18.3.0-r1os

AND

nodejs-current nodejs-currentMatch15.14.0-r0os

AND

nodejs-current nodejs-currentMatch19.5.0-r0os

AND

nodejs-current nodejs-currentMatch16.3.0-r0os

AND

nodejs-current nodejs-currentMatch20.5.0-r1os

AND

nodejs-current nodejs-currentMatch19.8.1-r0os

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch14.18.0-r0os

AND

nodejs nodejsMatch16.16.0-r1os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch16.15.0-r1os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch18.13.0-r0os

AND

nodejs nodejsMatch18.14.0-r0os

AND

nodejs nodejsMatch16.15.0-r0os

AND

nodejs nodejsMatch16.14.2-r1os

AND

nodejs nodejsMatch18.16.0-r0os

AND

nodejs nodejsMatch18.14.1-r0os

AND

nodejs nodejsMatch14.17.2-r0os

AND

nodejs nodejsMatch18.14.2-r0os

AND

nodejs nodejsMatch16.17.1-r0os

AND

nodejs nodejsMatch12.16.2-r0os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch16.13.2-r0os

AND

nodejs nodejsMatch16.14.2-r0os

AND

nodejs nodejsMatch18.15.0-r1os

AND

nodejs nodejsMatch16.17.0-r0os

AND

nodejs nodejsMatch16.13.1-r1os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch16.18.0-r1os

AND

nodejs nodejsMatch12.15.0-r1os

AND

nodejs nodejsMatch18.17.1-r0os

AND

nodejs nodejsMatch18.16.0-r1os

AND

nodejs nodejsMatch14.16.1-r2os

AND

nodejs nodejsMatch18.17.0-r0os

AND

nodejs nodejsMatch18.18.1-r0os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch14.16.0-r0os

AND

nodejs nodejsMatch16.16.0-r0os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch16.13.2-r1os

AND

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch18.15.0-r0os

AND

nodejs nodejsMatch14.16.0-r1os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch18.12.1-r0os

AND

nodejs nodejsMatch14.17.6-r1os

AND

nodejs nodejsMatch18.18.0-r0os

AND

nodejs nodejsMatch18.16.1-r0os

AND

nodejs nodejsMatch12.17.0-r0os

AND

alpinelinux alpine_linuxMatchedge

nodejs-current nodejs-currentMatch20.3.1-r0os

AND

nodejs-current nodejs-currentMatch20.0.0-r1os

AND

nodejs-current nodejs-currentMatch20.1.0-r1os

AND

nodejs-current nodejs-currentMatch20.3.0-r0os

AND

nodejs-current nodejs-currentMatch20.2.0-r0os

AND

nodejs-current nodejs-currentMatch20.5.0-r0os

AND

nodejs-current nodejs-currentMatch20.4.0-r0os

AND

alpinelinux alpine_linuxMatch3.18

nodejs nodejsMatch16.18.0-r1os

AND

nodejs nodejsMatch18.14.1-r0os

AND

nodejs nodejsMatch18.16.0-r0os

AND

nodejs nodejsMatch18.16.1-r0os

AND

nodejs nodejsMatch18.14.2-r0os

AND

nodejs nodejsMatch18.12.1-r0os

AND

nodejs nodejsMatch18.17.1-r0os

AND

nodejs nodejsMatch18.17.0-r0os

AND

alpinelinux alpine_linuxMatch3.17

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-39333
nodejs	www.nodejs.org/en/blog/vulnerability/october-2023-security-releases
security	www.security.netapp.com/advisory/ntap-20240808-0004/
security	www.security.netapp.com/advisory/ntap-20241004-0006/

30 Nov 2023 04:48Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.3

EPSS0.00936

SSVC