Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7909
HistoryNov 30, 2018 - 5:49 a.m.

Hostname Spoofing

2018-11-3005:49:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18

EPSS

0.001

Percentile

47.1%

JSON

Node.js is vulnerable to hostname spoofing. The hostname can be spoofed using a mixed case Javascript (e.g. javAscript) protocol if the node.js application uses url.parse() to determine the hostname of the URL. This causes hostname-based access controls to be incorrect and allows a remote attacker to bypass such access controls.

Related

prion 1
cbl_mariner 1
cvelist 1
redhatcve 1
debiancve 1
nessus 15
huntr 1
ubuntucve 1
ibm 14
nvd 1
alpinelinux 1
osv 2
cve 1
photon 4
openvas 11
altlinux 1
f5 1
suse 3
redhat 2
nodejsblog 1
freebsd 1
ubuntu 1
mageia 1
gentoo 1
prion
prion
Design/Logic Flaw
2018-11-28 17:29:00
cbl_mariner
cbl_mariner
CVE-2018-12123 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
cvelist
cvelist
CVE-2018-12123
2018-11-28 17:00:00
redhatcve
redhatcve
CVE-2018-12123
2020-02-02 02:37:48
debiancve
debiancve
CVE-2018-12123
2018-11-28 17:29:00
nessus
nessus
Photon OS 1.0: Nodejs PHSA-2020-1.0-0306
2020-07-14 00:00:00
Photon OS 2.0: Nodejs PHSA-2020-2.0-0210
2020-02-26 00:00:00
F5 Networks BIG-IP : Node.js vulnerabilities (K000137090)
2023-10-02 00:00:00
huntr
huntr
hostname spoofing via javascript
2022-03-04 10:29:25
ubuntucve
ubuntucve
CVE-2018-12123
2018-11-28 00:00:00
ibm
ibm
Security Bulletin: IBM DataPower Gateway is affected by a vulnerability in Node.js (CVE-2018-12123)
2021-06-08 21:47:38
Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud Transformation Advisor
2022-12-05 19:00:57
Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway
2019-02-20 18:30:01
nvd
nvd
CVE-2018-12123
2018-11-28 17:29:00
alpinelinux
alpinelinux
CVE-2018-12123
2018-11-28 17:29:00
osv
osv
CVE-2018-12123
2018-11-28 17:29:00
nodejs vulnerabilities
2021-03-15 21:18:37
cve
cve
CVE-2018-12123
2018-11-28 17:29:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0210
2020-02-21 00:00:00
Moderate Photon OS Security Update - PHSA-2020-0210
2020-02-21 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0306
2020-07-03 00:00:00
openvas
openvas
Node.js Multiple Vulnerabilities (Nov 2018) - Mac OS X
2018-11-29 00:00:00
Node.js Multiple Vulnerabilities (Nov 2018) - Windows
2018-11-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0118-1)
2021-06-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 10.14.1-alt1
2018-11-30 00:00:00
f5
f5
K000137090 : Node.js vulnerabilities CVE-2018-12121, CVE-2018-12122, and CVE-2018-12123
2023-10-02 00:00:00
suse
suse
Security update for nodejs8 (important)
2019-01-28 00:00:00
Security update for nodejs4 (important)
2019-01-25 00:00:00
Security update for nodejs6 (important)
2019-02-22 00:00:00
redhat
redhat
(RHSA-2019:1821) Important: rh-nodejs8-nodejs security update
2019-07-22 13:09:06
(RHSA-2019:2939) Important: rh-nodejs10-nodejs security update
2019-09-30 23:10:11
nodejsblog
nodejsblog
November 2018 Security Releases
2018-11-28 00:00:00
freebsd
freebsd
node.js -- multiple vulnerabilities
2018-11-27 00:00:00
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00

EPSS

0.001

Percentile

47.1%

JSON
Related for VERACODE:7909
prion1cbl_mariner1cvelist1redhatcve1debiancve1nessus15huntr1ubuntucve1ibm14nvd1alpinelinux1osv2cve1photon4openvas11altlinux1f51suse3redhat2nodejsblog1freebsd1ubuntu1mageia1gentoo1