[Git][security-tracker-team/security-tracker][master] Add CVE-2024-57965/node-axios

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
48de8bd7 by Salvatore Bonaccorso at 2025-01-29T22:18:22+01:00
Add CVE-2024-57965/node-axios

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29,7 +29,10 @@ CVE-2025-0617 (An attacker with access to an HX 10.0.0  and previous versions, m
 CVE-2025-0353 (The Divi Torque Lite \u2013 Best Divi Addon, Extensions, Modules & Soc ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-57965 (In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a U ...)
-	TODO: check
+	- node-axios <unfixed>
+	NOTE: https://github.com/axios/axios/issues/6351
+	NOTE: https://github.com/axios/axios/commit/0a8d6e19da5b9899a2abafaaa06a75ee548597db (v1.7.8)
+	NOTE: https://github.com/axios/axios/pull/6714
 CVE-2024-57439 (An issue in the reset password interface of ruoyi v4.8.0 allows attack ...)
 	NOT-FOR-US: ruoyi
 CVE-2024-57438 (Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48de8bd7db754cac6a435bd417b227f5157e880b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48de8bd7db754cac6a435bd417b227f5157e880b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250129/35c7e2a2/attachment.htm>