Expand intel coverage and refresh monitoring
这个提交包含在:
@@ -5,7 +5,7 @@ category: "frameworks"
|
||||
advisory_mode: "core"
|
||||
published_date: "2025-01-21T21:10:47Z"
|
||||
updated_date: "2026-02-04T02:29:26.373390Z"
|
||||
severity: "low"
|
||||
severity: "medium"
|
||||
exploit_status: "unknown"
|
||||
source_confidence: "official"
|
||||
verification_status: "verified-real"
|
||||
@@ -51,7 +51,7 @@ primary_source: "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-
|
||||
|
||||
- Canonical ID: `undici--CVE-2025-22150`
|
||||
- 系统: `undici`
|
||||
- 严重度: `low`
|
||||
- 严重度: `medium`
|
||||
- 来源置信度: `official`
|
||||
- 官方主源: https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975
|
||||
- 影响版本: `introduced=4.5.0, fixed<5.28.5, introduced=6.0.0, fixed<6.21.1, introduced=7.0.0, fixed<7.2.3`
|
||||
@@ -59,12 +59,12 @@ primary_source: "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-
|
||||
|
||||
## 其他来源
|
||||
|
||||
- https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2025-22150
|
||||
- https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0
|
||||
- https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a
|
||||
- https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385
|
||||
- https://hackerone.com/reports/2913312
|
||||
- https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f
|
||||
- https://github.com/nodejs/undici
|
||||
- https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113
|
||||
|
||||
|
||||
在新工单中引用
屏蔽一个用户