CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-22931

CVSS 9.8v3.1pub. 2021-08-16upd. 2024-11-21

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Netapp Active Iq Unified Manager
APP
Netapp
wszystkie wersje
Netapp Nextgen Api
APP
Netapp
wszystkie wersje
Netapp Oncommand Insight
APP
Netapp
wszystkie wersje
Netapp Oncommand Workflow Automation
APP
Netapp
wszystkie wersje
Netapp Snapcenter
APP
Netapp
wszystkie wersje
Node.js
APP
Nodejs
12.0.0 – 12.12.012.13.0 – 12.22.5 (bez)14.0.0 – 14.14.014.15.0 – 14.17.5 (bez)16.0.0 – 16.6.2 (bez)
Oracle Graalvm
APP
Oracle
20.3.321.2.0
Oracle MySQL Cluster
APP
Oracle
≤ 8.0.26
Oracle Peoplesoft Enterprise Peopletools
APP
Oracle
8.578.588.59
Siemens Sinec Infrastructure Network Services
APP
Siemens
< 1.0.1.1