Project Subscriptions
| Vendors | Products |
|---|---|
|
Debian
Subscribe
|
Debian Linux
Subscribe
|
|
Fedoraproject
Subscribe
|
Fedora
Subscribe
|
|
Momentjs
Subscribe
|
Moment
Subscribe
|
|
Netapp
Subscribe
|
Active Iq
Subscribe
|
|
Redhat
Subscribe
|
Acm
Subscribe
Ceph Storage
Subscribe
Jboss Enterprise Application Platform
Subscribe
Jboss Enterprise Application Platform Eus
Subscribe
Jboss Enterprise Bpms Platform
Subscribe
Jboss Fuse
Subscribe
Openshift Data Foundation
Subscribe
Openshift Distributed Tracing
Subscribe
Red Hat Single Sign On
Subscribe
Rhosemc
Subscribe
Service Mesh
Subscribe
|
|
Tenable
Subscribe
|
Tenable.sc
Subscribe
|
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3295-1 | node-moment security update |
EUVD |
EUVD-2022-1677 | Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js. |
Github GHSA |
GHSA-8hfj-j24r-96c4 | Path Traversal: 'dir/../../filename' in moment.locale |
Ubuntu USN |
USN-5559-1 | Moment.js vulnerabilities |
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Mon, 03 Nov 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Sun, 13 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Mon, 05 May 2025 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7 |
Mon, 28 Apr 2025 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat jboss Enterprise Application Platform Eus
|
|
| CPEs | cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7 | |
| Vendors & Products |
Redhat jboss Enterprise Application Platform Eus
|
Wed, 23 Apr 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Sun, 08 Sep 2024 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:acm:2.4::el8 cpe:/a:redhat:acm:2.5::el8 |
Mon, 19 Aug 2024 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:acm:2.5::el8 |
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2025-11-03T21:46:06.689Z
Reserved: 2022-02-10T00:00:00.000Z
Link: CVE-2022-24785
Updated: 2025-11-03T21:46:06.689Z
Status : Modified
Published: 2022-04-04T17:15:07.583
Modified: 2025-11-03T22:15:57.280
Link: CVE-2022-24785
OpenCVE Enrichment
No data.
Debian DLA
EUVD
Github GHSA
Ubuntu USN