CVE-2024-39338
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
Original description
The description as published by the source.
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-39338 node-axios Fixed in: 1.7.4+dfsg-1
- Ubuntu UBUNTU-CVE-2024-39338 node-axios
References
- advisory github.com
- advisory jeffhacks.com
- advisory nvd.nist.gov
- package github.com