Lucene search

CVE-2024-21536

🗓️ 19 Oct 2024 05:04:00Reported by snykType

Versions of http-proxy-middleware before 2.0.7 and from 3.0.0 to 3.0.3 vulnerable to Denial of Service (DoS)

Reporter	Title	Published	Views	Family All 14
CVE	CVE-2024-21536	19 Oct 202405:15	–	cve
Github Security Blog	Denial of service in http-proxy-middleware	19 Oct 202406:30	–	github
RedhatCVE	CVE-2024-21536	21 Oct 202405:32	–	redhatcve
Cvelist	CVE-2024-21536	19 Oct 202405:00	–	cvelist
RedHat Linux	(RHSA-2024:9627) Moderate: Red Hat OpenShift Service Mesh Containers for 2.6.3	14 Nov 202408:34	–	redhat
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard and DesignerAuthoring operands are vulnerable to denial of service [CVE-2024-21536]	20 Nov 202409:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager.	18 Dec 202416:36	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	9 Dec 202409:46	–	ibm
IBM Security Bulletins	Security Bulletin: The Log Source Management App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	10 Jan 202519:27	–	ibm
NVD	CVE-2024-21536	19 Oct 202405:15	–	nvd

[
  {
    "cpes": [
      "cpe:2.3:a:chimurai:http-proxy-middleware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "chimurai",
    "product": "http-proxy-middleware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.0.7",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "3.0.0",
        "lessThan": "3.0.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
github	www.github.com/chimurai/http-proxy-middleware/commit/0b4274e8cc9e9a2c5a06f35fbf456ccfcebc55a5
security	www.security.snyk.io/vuln/SNYK-JS-HTTPPROXYMIDDLEWARE-8229906
gist	www.gist.github.com/mhassan1/28be67266d82a53708ed59ce5dc3c94a
github	www.github.com/chimurai/http-proxy-middleware/commit/788b21e4aff38332d6319557d4a5b1b13b1f9a22

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Oct 2024 05:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS37.5

EPSS0.001

SSVC

http-proxy-middleware node.js dos