The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another …

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2018-7160 · Microsoft / collected KEV context

EUVD-2022-5619

GHSA-wq4c-wm6x-jw44

cve-program · CVE-2018-7160

• https://www.oracle.com//security-alerts/cpujul2021.html
• https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/
• https://support.f5.com/csp/article/K63025104?utm_source=f5support&amp%3Butm_medium=RSS

euvd · EUVD-2022-5619

• https://www.oracle.com//security-alerts/cpujul2021.html
• https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/
• https://support.f5.com/csp/article/K63025104?utm_source=f5support&amp%3Butm_medium=RSS

nvd · CVE-2018-7160

• https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/
• https://support.f5.com/csp/article/K63025104?utm_source=f5support&amp%3Butm_medium=RSS
• https://www.oracle.com//security-alerts/cpujul2021.html

osv · GHSA-wq4c-wm6x-jw44

• https://nvd.nist.gov/vuln/detail/CVE-2018-7160
• https://github.com/nodejs/node/commit/e3950d1a402b80e4098a40aacddd6a104da0cfa9
• https://nodejs.org/en/blog/vulnerability/march-2018-security-releases
• https://support.f5.com/csp/article/K63025104?utm_source=f5support&utm_medium=RSS
• https://www.oracle.com//security-alerts/cpujul2021.html

No related operational record is retained in the current change model.