5

CVE-2024-43796: expressjs express Cross-site Scripting

CVSS: 5.0v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2024-43796DEBIAN-CVE-2024-43796CGA-28vm-9whp-qgfr
Published 10-09-2024Last modified 10-09-2024
Open JSON

Vulnerability summary

CVE-2024-43796 is a medium (CVSS 5.0) Cross-site Scripting vulnerability in expressjs express. EPSS estimates a 0.49% chance of exploitation in the next 30 days, higher than 40.6% of scored vulnerabilities.

Overall risk
20/100
0100
Low · default modelHow is this calculated?
CVSS score
5.0/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.49%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 5
USN-7581-1CGA-7RMH-796C-QMQ8CGA-8W92-879X-F9WCCGA-HC9X-JC27-5P4RCGA-JQ8V-JX6X-3FPC

Timeline

  1. 10-09-2024
    PublishedVulnerability first disclosed.
  2. 10-09-2024
    Last modifiedVulnerability information updated.

Description

Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0.

CVSS metrics

8 scores · 7 sources · 2 versions

EPSS trend

Probability

0.49%

Chance of exploitation in the next 30 days

Percentile

41%

Versus all other CVEs

30-day change

0.00 pp

From 0.49% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.49%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard17 products
  • arangodb-3.11< 3.11.14.5-r25
  • argo-workflows< 3.6.5-r2
  • kubeflow-centraldashboard< 1.9.0-r4
  • kubeflow-pipelines< 2.2.0-r12
  • kubeflow-pipelines-apiserver< 2.2.0-r12
Wolfi16 products
  • argo-workflows< 3.6.5-r2
  • kubeflow-centraldashboard< 1.9.0-r4
  • kubeflow-pipelines< 2.2.0-r12
  • kubeflow-pipelines-apiserver< 2.2.0-r12
  • kubeflow-pipelines-cache_server< 2.2.0-r12
Debian1 product
  • node-expressAll versions (No fix recorded) | < 4.21.0+~cs8.36.26-1
Expressjs1 product
  • express< 4.20.0 | ≥ 5.0.0-alpha.1, < 5.0.0
Npm1 product
  • express< 4.20.0 | ≥ 5.0.0-alpha.1, < 5.0.0
Openjsf1 product
  • express< 4.20.0 | 5.0.0:alpha1 | 5.0.0:alpha2 | 5.0.0:alpha3 | 5.0.0:alpha4 | 5.0.0:alpha5 | 5.0.0:alpha6 | 5.0.0:alpha7 | 5.0.0:alpha8 | 5.0.0:beta1 | 5.0.0:beta2 | 5.0.0:beta3
Ubuntu1 product
  • node-express< 4.1.1~dfsg-1ubuntu0.16.04.1~esm1 | < 4.1.1~dfsg-1ubuntu0.18.04.1~esm1 | < 4.17.1-2ubuntu0.1~esm1 | < 4.17.3+~4.17.13-1ubuntu0.1~esm1 | < 4.19.2+~cs8.36.21-1ubuntu0.1~esm1

7 vendors · 38 products

References

9 links