CVSS Meta Temp Score	Garga na exploit ndiyam (≈)	CTI Nganji Score
4.1	$0-$5k	0.09

Gundumabayani

Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin Segmentio is-url har 1.2.2. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, index.js na cikin fayil, $software_component na cikin sashi. Ngam manipulation shi Kari na aiki. Wannan rauni ana sayar da shi da suna CVE-2018-25079. Ngam yiɗi ka a tuma ndiyam ka nder waya. Ba exploit ɗin da ake da shi. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Furɗebayani

Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin Segmentio is-url har 1.2.2. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, index.js na cikin fayil, $software_component na cikin sashi. Ngam manipulation shi Kari na aiki. CWE shidin ka a yi bayani matsala sai ya kai CWE-1333. Gaskiya, laifi an fitar da shi 02/02/2023 a matsayin 18. Advisory ɗin ana rabawa don saukewa a github.com.

Wannan rauni ana sayar da shi da suna CVE-2018-25079. Ngam yiɗi ka a tuma ndiyam ka nder waya. Tekinikal bayani ga. Wannan vulnerability ɗin ba shi da yawa sosai. Ba exploit ɗin da ake da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam.

Á wúro a wondi feere. Kama 0-day, an ndiyam a wuro be $0-$5k.

Patch ɗin sunan ganowa shine 149550935c63a98c11f27f694a7c4a9479e53794. An tanadi gyaran matsalar don saukewa a github.com. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. Advisory ɗin nan na da wannan bayanin:

As disclosed by email, the regex in this module was vulnerable to catastrophic backtracking. This could be used as a REDOS vector for Node.js servers that use this module.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Kayanbayani

Ngilabe

• Segmentio

Sunu

• is-url

Furɗe

• 1.2.0
• 1.2.1
• 1.2.2

Laisens

• Borno-wuro

Webseite

• Kayan: https://github.com/segmentio/is-url/

CPE 2.3bayani

• 🔍
• 🔍
• 🔍

CPE 2.2bayani

• 🔍
• 🔍
• 🔍

CVSSv4bayani

VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

CVSSv3bayani

VulDB Meta Base Score: 4.3
VulDB Meta Temp Score: 4.1

VulDB Ganda Borno: 4.3
VulDB Temp Score: 4.1
VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

CVSSv2bayani

AV	AC	Au	C	I	A
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳

Vektar	Kumpleksiti	Authentisierung	Kariyandi	Gaskiya	Gashina
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu

VulDB Ganda Borno: 🔍
VulDB Temp Score: 🔍
VulDB Gaskiya: 🔍

Gargajiyabayani

Klasu: Kari na aiki
CWE: CWE-1333 / CWE-400 / CWE-404
CAPEC: 🔍
ATT&CK: 🔍

Fizikal: Ayi
Gumti: Ayi
Gana: Ee

Gashina: 🔍
Halitta: A wondi feere

EPSS Score: 🔍
EPSS Percentile: 🔍

Furɗo farashi: 🔍
Gaskiya farashi ndiyam: 🔍

0-Day	furu	furu	furu	furu
Lale	furu	furu	furu	furu

Bayani na barazanabayani

Ngam: 🔍
Akteɓe ɓernde: 🔍
Kura APT goruwa masu aiki: 🔍

Kari gamjibayani

Garga: Gargajiya
Halitta: 🔍

0-Day Gana: 🔍

Gargajiya: is-url 1.2.3
Kari: 149550935c63a98c11f27f694a7c4a9479e53794

Waktin layibayani

02/02/2023 🔍
02/02/2023 +0 Hənde 🔍
02/02/2023 +0 Hənde 🔍
03/04/2023 +30 Hənde 🔍

Ngizimbayani

Kayan: github.com

Gargaaji: 18
Halitta: Gaskiya

CVE: CVE-2018-25079 (🔍)
GCVE (CVE): GCVE-0-2018-25079
GCVE (VulDB): GCVE-100-220058

Gumtibayani

Súgá: 02/02/2023 20:58
Gargadi: 03/04/2023 09:07
Goyarwa: 02/02/2023 20:58 (44), 03/04/2023 09:07 (2)
Gadankam: 🔍
Cache ID: 253:CAC:103

Ganaaji

Do you need the next level of professionalism?

Upgrade your account now!