Amazon Linux 2023 : nodejs20, nodejs20-devel, nodejs20-full-i18n (ALAS2023-2024-594)

low Nessus Plugin ID 194485

Version 1.3

Dec 20, 2024, 9:44 AM

  • CVSS metrics ("CVSSv3 score" set to 3.5)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N")
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C")
  • CVSSv3 score source (changed from "CVE-2024-27983" to "CVE-2024-30261")
  • CVSSv3 severity (based on CVE-2024-30261, severity decreased from "High" to "Low")
  • Exploit attributes ("Exploit available" set to "True")
  • Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available")

Plugin Feed: 202412200944

Version 1.2

Dec 12, 2024, 9:55 AM

  • CVSS metrics ("CVSSv2 score" set to 8.5)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:C")
  • CVSS metrics ("Cvssv4 score" set to 0.0)
  • CVSSv2 severity (based on CVE-2024-27982, severity increased from "Medium" to "High")
  • CVSSv2 severity (based on None, severity decreased from "High" to "Low")
  • Detection (updated detection logic)

Plugin Feed: 202412120955

Version 1.1

Jun 25, 2024, 3:40 AM

  • CVE (set "CVE" coverage to "CVE-2024-27982,CVE-2024-27983,CVE-2024-28182,CVE-2024-30261")
  • CVSS metrics ("CVSSv2 score" set to 6.4)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N")
  • CVSSv2 score source (changed from "CVE-2024-30261" to "CVE-2024-27982")
  • CVSSv2 severity (based on CVE-2024-27982, severity increased from "Low" to "Medium")
  • Plugin metadata

Plugin Feed: 202406250340

Version 1.0

Apr 30, 2024, 4:27 AM

  • New

Plugin Feed: 202404300427

* Changelogs are generally available for changes made after Nov 1, 2022