CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24785

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.7%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2022-24785

Momentjs » Moment » Version: 1.0.1

cpe:2.3:a:momentjs:moment:1.0.1
Momentjs » Moment » Version: 1.1.0

cpe:2.3:a:momentjs:moment:1.1.0
Momentjs » Moment » Version: 1.1.1

cpe:2.3:a:momentjs:moment:1.1.1
Momentjs » Moment » Version: 1.1.2

cpe:2.3:a:momentjs:moment:1.1.2
Momentjs » Moment » Version: 1.2.0

cpe:2.3:a:momentjs:moment:1.2.0
Momentjs » Moment » Version: 1.3.0

cpe:2.3:a:momentjs:moment:1.3.0
Momentjs » Moment » Version: 1.4.0

cpe:2.3:a:momentjs:moment:1.4.0
Momentjs » Moment » Version: 1.5.0

cpe:2.3:a:momentjs:moment:1.5.0
Momentjs » Moment » Version: 1.5.1

cpe:2.3:a:momentjs:moment:1.5.1
Momentjs » Moment » Version: 1.6.0

cpe:2.3:a:momentjs:moment:1.6.0
Momentjs » Moment » Version: 1.6.1

cpe:2.3:a:momentjs:moment:1.6.1
Momentjs » Moment » Version: 1.6.2

cpe:2.3:a:momentjs:moment:1.6.2
Momentjs » Moment » Version: 1.7.0

cpe:2.3:a:momentjs:moment:1.7.0
Momentjs » Moment » Version: 1.7.1

cpe:2.3:a:momentjs:moment:1.7.1
Momentjs » Moment » Version: 1.7.2

cpe:2.3:a:momentjs:moment:1.7.2
Momentjs » Moment » Version: 2.0.0

cpe:2.3:a:momentjs:moment:2.0.0
Momentjs » Moment » Version: 2.1.0

cpe:2.3:a:momentjs:moment:2.1.0
Momentjs » Moment » Version: 2.10.2

cpe:2.3:a:momentjs:moment:2.10.2
Momentjs » Moment » Version: 2.10.3

cpe:2.3:a:momentjs:moment:2.10.3
Momentjs » Moment » Version: 2.10.5

cpe:2.3:a:momentjs:moment:2.10.5
Momentjs » Moment » Version: 2.10.6

cpe:2.3:a:momentjs:moment:2.10.6
Momentjs » Moment » Version: 2.11.0

cpe:2.3:a:momentjs:moment:2.11.0
Momentjs » Moment » Version: 2.11.1

cpe:2.3:a:momentjs:moment:2.11.1
Momentjs » Moment » Version: 2.11.2

cpe:2.3:a:momentjs:moment:2.11.2
Momentjs » Moment » Version: 2.12.0

cpe:2.3:a:momentjs:moment:2.12.0
Momentjs » Moment » Version: 2.13.0

cpe:2.3:a:momentjs:moment:2.13.0
Momentjs » Moment » Version: 2.14.0

cpe:2.3:a:momentjs:moment:2.14.0
Momentjs » Moment » Version: 2.14.1

cpe:2.3:a:momentjs:moment:2.14.1
Momentjs » Moment » Version: 2.14.2

cpe:2.3:a:momentjs:moment:2.14.2
Momentjs » Moment » Version: 2.15.0

cpe:2.3:a:momentjs:moment:2.15.0
Momentjs » Moment » Version: 2.15.1

cpe:2.3:a:momentjs:moment:2.15.1
Momentjs » Moment » Version: 2.15.2

cpe:2.3:a:momentjs:moment:2.15.2
Momentjs » Moment » Version: 2.16.0

cpe:2.3:a:momentjs:moment:2.16.0
Momentjs » Moment » Version: 2.17.0

cpe:2.3:a:momentjs:moment:2.17.0
Momentjs » Moment » Version: 2.17.1

cpe:2.3:a:momentjs:moment:2.17.1
Momentjs » Moment » Version: 2.18.0

cpe:2.3:a:momentjs:moment:2.18.0
Momentjs » Moment » Version: 2.18.1

cpe:2.3:a:momentjs:moment:2.18.1
Momentjs » Moment » Version: 2.19.0

cpe:2.3:a:momentjs:moment:2.19.0
Momentjs » Moment » Version: 2.19.1

cpe:2.3:a:momentjs:moment:2.19.1
Momentjs » Moment » Version: 2.19.2

cpe:2.3:a:momentjs:moment:2.19.2
Momentjs » Moment » Version: 2.19.3

cpe:2.3:a:momentjs:moment:2.19.3
Momentjs » Moment » Version: 2.19.4

cpe:2.3:a:momentjs:moment:2.19.4
Momentjs » Moment » Version: 2.2.0

cpe:2.3:a:momentjs:moment:2.2.0
Momentjs » Moment » Version: 2.2.1

cpe:2.3:a:momentjs:moment:2.2.1
Momentjs » Moment » Version: 2.20.0

cpe:2.3:a:momentjs:moment:2.20.0
Momentjs » Moment » Version: 2.20.1

cpe:2.3:a:momentjs:moment:2.20.1
Momentjs » Moment » Version: 2.21.0

cpe:2.3:a:momentjs:moment:2.21.0
Momentjs » Moment » Version: 2.22.0

cpe:2.3:a:momentjs:moment:2.22.0
Momentjs » Moment » Version: 2.22.1

cpe:2.3:a:momentjs:moment:2.22.1
Momentjs » Moment » Version: 2.22.2

cpe:2.3:a:momentjs:moment:2.22.2
Momentjs » Moment » Version: 2.23.0

cpe:2.3:a:momentjs:moment:2.23.0
Momentjs » Moment » Version: 2.24.0

cpe:2.3:a:momentjs:moment:2.24.0
Momentjs » Moment » Version: 2.25.0

cpe:2.3:a:momentjs:moment:2.25.0
Momentjs » Moment » Version: 2.25.1

cpe:2.3:a:momentjs:moment:2.25.1
Momentjs » Moment » Version: 2.25.2

cpe:2.3:a:momentjs:moment:2.25.2
Momentjs » Moment » Version: 2.25.3

cpe:2.3:a:momentjs:moment:2.25.3
Momentjs » Moment » Version: 2.26.0

cpe:2.3:a:momentjs:moment:2.26.0
Momentjs » Moment » Version: 2.27.0

cpe:2.3:a:momentjs:moment:2.27.0
Momentjs » Moment » Version: 2.28.0

cpe:2.3:a:momentjs:moment:2.28.0
Momentjs » Moment » Version: 2.29.0

cpe:2.3:a:momentjs:moment:2.29.0
Momentjs » Moment » Version: 2.29.1

cpe:2.3:a:momentjs:moment:2.29.1
Momentjs » Moment » Version: 2.3.0

cpe:2.3:a:momentjs:moment:2.3.0
Momentjs » Moment » Version: 2.3.1

cpe:2.3:a:momentjs:moment:2.3.1
Momentjs » Moment » Version: 2.4.0

cpe:2.3:a:momentjs:moment:2.4.0
Momentjs » Moment » Version: 2.5.0

cpe:2.3:a:momentjs:moment:2.5.0
Momentjs » Moment » Version: 2.5.1

cpe:2.3:a:momentjs:moment:2.5.1
Momentjs » Moment » Version: 2.6.0

cpe:2.3:a:momentjs:moment:2.6.0
Momentjs » Moment » Version: 2.7.0

cpe:2.3:a:momentjs:moment:2.7.0
Momentjs » Moment » Version: 2.8.0

cpe:2.3:a:momentjs:moment:2.8.0
Momentjs » Moment » Version: 2.8.1

cpe:2.3:a:momentjs:moment:2.8.1
Momentjs » Moment » Version: 2.8.2

cpe:2.3:a:momentjs:moment:2.8.2
Momentjs » Moment » Version: 2.8.3

cpe:2.3:a:momentjs:moment:2.8.3
Momentjs » Moment » Version: 2.8.4

cpe:2.3:a:momentjs:moment:2.8.4
Momentjs » Moment » Version: 2.9.0

cpe:2.3:a:momentjs:moment:2.9.0
Netapp » Active Iq » Version: N/A

cpe:2.3:a:netapp:active_iq:-
Tenable » Tenable.sc » Version: N/A

cpe:2.3:a:tenable:tenable.sc:-
Tenable » Tenable.sc » Version: 5.13.0

cpe:2.3:a:tenable:tenable.sc:5.13.0
Tenable » Tenable.sc » Version: 5.14.0

cpe:2.3:a:tenable:tenable.sc:5.14.0
Tenable » Tenable.sc » Version: 5.14.1

cpe:2.3:a:tenable:tenable.sc:5.14.1
Tenable » Tenable.sc » Version: 5.16.0

cpe:2.3:a:tenable:tenable.sc:5.16.0
Tenable » Tenable.sc » Version: 5.17.0

cpe:2.3:a:tenable:tenable.sc:5.17.0
Tenable » Tenable.sc » Version: 5.18.0

cpe:2.3:a:tenable:tenable.sc:5.18.0
Tenable » Tenable.sc » Version: 5.19.0

cpe:2.3:a:tenable:tenable.sc:5.19.0
Tenable » Tenable.sc » Version: 5.19.1

cpe:2.3:a:tenable:tenable.sc:5.19.1
Tenable » Tenable.sc » Version: 5.20.0

cpe:2.3:a:tenable:tenable.sc:5.20.0
Tenable » Tenable.sc » Version: 5.20.1

cpe:2.3:a:tenable:tenable.sc:5.20.1
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Fedoraproject » Fedora » Version: 36

cpe:2.3:o:fedoraproject:fedora:36

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24785

Products

Pricing

Contact Us