CVE-2024-21540 - Vulnerability Details

This issue is not a vulnerability because no real attack scenario can happen.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

References

No reference.

History

Sun, 17 Nov 2024 09:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-22
References	https://gist.github.com/mcoimbra/0f889d69b39c1c09aa6a8c001072402e https://security.snyk.io/vuln/SNYK-JS-SOURCEMAPSUPPORT-6112477
Metrics	cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

Sun, 17 Nov 2024 09:15:00 +0000

Type	Values Removed	Values Added
CPEs	cpe:2.3:a:directory_traversal:source_map_support::::::::
Vendors & Products	Directory Traversal Directory Traversal source Map Support
Metrics	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sun, 17 Nov 2024 09:00:00 +0000

Type	Values Removed	Values Added
Description	All versions of the package source-map-support are vulnerable to Directory Traversal in the retrieveSourceMap function.	This issue is not a vulnerability because no real attack scenario can happen.
Metrics	cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P'}`	cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

Wed, 13 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Directory Traversal Directory Traversal source Map Support
CPEs		cpe:2.3:a:directory_traversal:source_map_support::::::::
Vendors & Products		Directory Traversal Directory Traversal source Map Support
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 13 Nov 2024 05:15:00 +0000

Type	Values Removed	Values Added
Description		All versions of the package source-map-support are vulnerable to Directory Traversal in the retrieveSourceMap function.
Weaknesses		CWE-22
References		https://gist.github.com/mcoimbra/0f889d69b39c1c09aa6a8c001072402e https://security.snyk.io/vuln/SNYK-JS-SOURCEMAPSUPPORT-6112477
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P'}`

MITRE

Status: REJECTED

Assigner: snyk

Published: 2024-11-13T05:00:06.224Z

Updated: 2024-11-17T08:52:02.062Z

Reserved: 2023-12-22T12:33:20.123Z

Link: CVE-2024-21540

Vulnrichment

Updated:

NVD

Status : Rejected

Published: 2024-11-13T05:15:12.997

Modified: 2024-11-17T09:15:11.853

Link: CVE-2024-21540

Redhat

No data.

OpenCVE Enrichment

No data.

Metrics