CVE:CVE-2022-24785
CNNVD:CNNVD-202204-1928
Moment.js是一个 JavaScript 日期库。用于解析、验证、操作和格式化日期。
Moment.js 1.0.1版本至2.29.1版本存在路径遍历漏洞。攻击者利用该漏洞可以访问存储在web根文件夹之外的文件和目录。
solution:Upgrade momentjs moment to a higher version than 2.29.2,and avoid the version [1.0.1,2.29.2); Upgrade tenable tenable.sc to a higher version than 5.21.0,and avoid the version (,5.21.0); Upgrade netapp active_iq to a higher version than -; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0