CVE-2022-33987
Summary
| CVE | CVE-2022-33987 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-06-18 21:15:00 UTC |
| Updated | 2022-06-28 16:15:00 UTC |
| Description | The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Got Project | Got | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Comparing v12.0.3...v12.1.0 · sindresorhus/got · GitHub | MISC | github.com | |
| Release v11.8.5 · sindresorhus/got · GitHub | MISC | github.com | |
| Disable redirects to UNIX sockets by szmarczak · Pull Request #2047 · sindresorhus/got · GitHub | MISC | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160092 Oracle Enterprise Linux Security Update for nodejs:14 (ELSA-2022-6448)
- 160094 Oracle Enterprise Linux Security Update for nodejs:16 (ELSA-2022-6449)
- 160111 Oracle Enterprise Linux Security Update for nodejs and nodejs-nodemon (ELSA-2022-6595)
- 180836 Debian Security Update for node-got (CVE-2022-33987)
- 240655 Red Hat Update for rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon (RHSA-2022:6389)
- 240656 Red Hat Update for nodejs:14 (RHSA-2022:6448)
- 240660 Red Hat Update for nodejs:16 (RHSA-2022:6449)
- 240676 Red Hat Update for nodejs and nodejs-nodemon (RHSA-2022:6595)
- 240736 Red Hat Update for nodejs:14 (RHSA-2022:6985)
- 377624 Alibaba Cloud Linux Security Update for nodejs:14 (ALINUX3-SA-2022:0165)
- 378599 Splunk Enterprise Third Party Package Updates for June (SVD-2023-0613)
- 378883 Splunk Enterprise August Third Party Package Updates (SVD-2023-0808)
- 940654 AlmaLinux Security Update for nodejs:14 (ALSA-2022:6448)
- 940678 AlmaLinux Security Update for nodejs and nodejs-nodemon (ALSA-2022:6595)
- 960189 Rocky Linux Security Update for nodejs:14 (RLSA-2022:6448)
- 960277 Rocky Linux Security Update for nodejs:16 (RLSA-2022:6449)
- 960531 Rocky Linux Security Update for nodejs and nodejs-nodemon (RLSA-2022:6595)