{"id":"EUVD-2022-5619","revision":"a69a6b9263214d37a93cea0fbb506c52","records":[{"revision":"a69a6b9263214d37a93cea0fbb506c52","observedAt":"2026-10-28T12:37:16.785+00:00","statement":{"source":"euvd","id":"EUVD-2022-5619","aliases":["CVE-2018-7160","GHSA-wq4c-wm6x-jw44"],"title":"The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another …","description":"The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the Node.js process. A malicious website could use a DNS rebinding attack to trick the web browser to bypass same-origin-policy checks and to allow HTTP connections to localhost or to hosts on the local network. If a Node.js process with the debug port active is running on localhost or on a host on the local network, the malicious website could connect to it as a debugger, and get full code execution access.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[],"references":["https://www.oracle.com//security-alerts/cpujul2021.html","https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/","https://support.f5.com/csp/article/K63025104?utm_source=f5support&amp%3Butm_medium=RSS"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5619","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 17, 2018, 2:00:00 PM","dateUpdated":"Oct 8, 2026, 9:14:05 PM"},"relatedAdvisories":[{"id":"SUSE-SU-2019:14246-1","title":"Security update for Mozilla Firefox","vulnerabilityIds":["CVE-2013-2882","CVE-2013-6639","CVE-2013-6640","CVE-2013-6668","CVE-2014-0224","CVE-2015-3193","CVE-2015-3194","CVE-2015-5380","CVE-2015-7384","CVE-2016-2086","CVE-2016-2178","CVE-2016-2183","CVE-2016-2216","CVE-2016-5172","CVE-2016-5325","CVE-2016-6304","CVE-2016-6306","CVE-2016-7052","CVE-2016-7099","CVE-2017-1000381","CVE-2017-10686","CVE-2017-11111","CVE-2017-11499","CVE-2017-14228","CVE-2017-14849","CVE-2017-14919","CVE-2017-15896","CVE-2017-15897","CVE-2017-17810","CVE-2017-17811","CVE-2017-17812","CVE-2017-17813","CVE-2017-17814","CVE-2017-17815","CVE-2017-17816","CVE-2017-17817","CVE-2017-17818","CVE-2017-17819","CVE-2017-17820","CVE-2017-18207","CVE-2017-3735","CVE-2017-3736","CVE-2017-3738","CVE-2018-0732","CVE-2018-1000168","CVE-2018-12115","CVE-2018-12116","CVE-2018-12121","CVE-2018-12122","CVE-2018-12123","CVE-2018-20406","CVE-2018-20852","CVE-2018-7158","CVE-2018-7159","CVE-2018-7160","CVE-2018-7161","CVE-2018-7167","CVE-2019-10160","CVE-2019-11709","CVE-2019-11710","CVE-2019-11711","CVE-2019-11712","CVE-2019-11713","CVE-2019-11714","CVE-2019-11715","CVE-2019-11716","CVE-2019-11717","CVE-2019-11718","CVE-2019-11719","CVE-2019-11720","CVE-2019-11721","CVE-2019-11723","CVE-2019-11724","CVE-2019-11725","CVE-2019-11727","CVE-2019-11728","CVE-2019-11729","CVE-2019-11730","CVE-2019-11733","CVE-2019-11735","CVE-2019-11736","CVE-2019-11738","CVE-2019-11740","CVE-2019-11742","CVE-2019-11743","CVE-2019-11744","CVE-2019-11746","CVE-2019-11747","CVE-2019-11748","CVE-2019-11749","CVE-2019-11750","CVE-2019-11751","CVE-2019-11752","CVE-2019-11753","CVE-2019-11757","CVE-2019-11758","CVE-2019-11759","CVE-2019-11760","CVE-2019-11761","CVE-2019-11762","CVE-2019-11763","CVE-2019-11764","CVE-2019-13173","CVE-2019-15903","CVE-2019-5010","CVE-2019-5737","CVE-2019-9511","CVE-2019-9512","CVE-2019-9513","CVE-2019-9514","CVE-2019-9515","CVE-2019-9516","CVE-2019-9517","CVE-2019-9518","CVE-2019-9636","CVE-2019-9811","CVE-2019-9812","CVE-2019-9947"]},{"id":"RHSA-2018:2949","title":"Red Hat Security Advisory: rh-nodejs8-nodejs security update","vulnerabilityIds":["CVE-2018-7159","CVE-2018-7160","CVE-2018-7161","CVE-2018-7167","CVE-2018-12115"]},{"id":"SUSE-SU-2018:1183-1","title":"Security update for nodejs6","vulnerabilityIds":["CVE-2018-7158","CVE-2018-7159","CVE-2018-7160"]},{"id":"WID-SEC-W-2023-0561","title":"Xerox FreeFlow Print Server: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-21900","CVE-2023-21843","CVE-2023-21835","CVE-2023-21830","CVE-2022-46882","CVE-2022-46881","CVE-2022-46880","CVE-2022-46878","CVE-2022-46875","CVE-2022-46874","CVE-2022-46872","CVE-2022-45421","CVE-2022-45420","CVE-2022-45419","CVE-2022-45418","CVE-2022-45417","CVE-2022-45416","CVE-2022-45415","CVE-2022-45414","CVE-2022-45413","CVE-2022-45412","CVE-2022-45411","CVE-2022-45410","CVE-2022-45409","CVE-2022-45408","CVE-2022-45407","CVE-2022-45406","CVE-2022-45405","CVE-2022-45404","CVE-2022-45403","CVE-2022-45063","CVE-2022-45061","CVE-2022-44638","CVE-2022-43680","CVE-2022-43548","CVE-2022-42932","CVE-2022-42929","CVE-2022-42928","CVE-2022-42927","CVE-2022-42252","CVE-2022-41556","CVE-2022-41323","CVE-2022-40962","CVE-2022-40960","CVE-2022-40959","CVE-2022-40958","CVE-2022-40957","CVE-2022-40956","CVE-2022-40674","CVE-2022-3970","CVE-2022-39260","CVE-2022-39253","CVE-2022-3786","CVE-2022-37797","CVE-2022-37454","CVE-2022-37436","CVE-2022-36760","CVE-2022-3627","CVE-2022-3626","CVE-2022-36087","CVE-2022-36059","CVE-2022-3602","CVE-2022-3599","CVE-2022-3598","CVE-2022-3597","CVE-2022-3570","CVE-2022-35256","CVE-2022-35255","CVE-2022-34526","CVE-2022-3276","CVE-2022-32222","CVE-2022-32215","CVE-2022-32213","CVE-2022-32212","CVE-2022-3204","CVE-2022-3190","CVE-2022-31630","CVE-2022-31629","CVE-2022-31628","CVE-2022-3155","CVE-2022-3034","CVE-2022-3033","CVE-2022-3032","CVE-2022-29458","CVE-2022-29187","CVE-2022-29154","CVE-2022-2869","CVE-2022-2868","CVE-2022-2867","CVE-2022-27406","CVE-2022-27405","CVE-2022-27404","CVE-2022-26981","CVE-2022-24765","CVE-2022-24070","CVE-2022-23901","CVE-2022-22844","CVE-2022-2210","CVE-2022-2208","CVE-2022-2207","CVE-2022-2206","CVE-2022-2183","CVE-2022-2175","CVE-2022-21658","CVE-2022-21628","CVE-2022-21626","CVE-2022-21624","CVE-2022-21619","CVE-2022-2125","CVE-2022-2122","CVE-2022-2058","CVE-2022-2057","CVE-2022-2056","CVE-2022-1925","CVE-2022-1924","CVE-2022-1923","CVE-2022-1922","CVE-2022-1921","CVE-2022-1920","CVE-2022-1348","CVE-2022-1056","CVE-2022-0924","CVE-2022-0909","CVE-2022-0908","CVE-2022-0907","CVE-2022-0891","CVE-2022-0865","CVE-2022-0562","CVE-2022-0561","CVE-2021-46848","CVE-2021-46823","CVE-2021-42694","CVE-2021-42574","CVE-2021-37750","CVE-2021-28544","CVE-2020-10735","CVE-2019-6111","CVE-2018-7160","CVE-2015-20107","CVE-2006-20001"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2022-5619","identifiers":["EUVD-2022-5619","CVE-2018-7160","GHSA-wq4c-wm6x-jw44"]},"retained":false,"historicalAffected":[]}],"coverage":[]}