CVE-2024-47764: jshttp cookie Injection

CVSS: 6.9v4.0MediumDeferred

AliasesUBUNTU-CVE-2024-47764DEBIAN-CVE-2024-47764CGA-2hfh-p94x-mx4p+187 more

Published 04-10-2024Last modified 04-10-2024

Vulnerability summary

CVE-2024-47764 is a medium (CVSS 6.9) Injection vulnerability in jshttp cookie. EPSS estimates a 0.74% chance of exploitation in the next 30 days, higher than 53.9% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.9/10

010

Medium · v4.0 (CVE.org)

EPSS score

0.74%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 12

CGA-56HQ-34M4-PGC5 CGA-5QXJ-2Q8Q-HVFH CGA-68HX-WWXR-V9H5 CGA-83PH-66P4-QVQJ CGA-HCHV-5XPF-MWJ3 CGA-MX8Q-5H2R-92GG+6 more

Timeline

04-10-2024
PublishedVulnerability first disclosed.
04-10-2024
Last modifiedVulnerability information updated.

Description

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

CVSS metrics

6 scores · 6 sources · 1 version

v4.06.9

EPSS trend

Probability

0.74%

Chance of exploitation in the next 30 days

Percentile

54%

Versus all other CVEs

30-day change

0.00 pp

From 0.74% on 20-09-2026

20-09-202620-10-2026

EPSS score

0.74%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Affected systems

Chainguard95 products

arangodb-3.11< 3.11.14.5-r25
argo-workflows< 3.6.0-r1
commercial-gitlab-rails-ee-19.1< 19.1.7-r3
commercial-gitlab-rails-ee-19.2< 19.2.7-r1
commercial-gitlab-rails-ee-fips-19.1All versions (No fix recorded)

commercial-gitlab-rails-ee-fips-19.2< 19.2.7-r1
commercial-gitlab-rails-ee-fips-19.3< 19.3.3-r1
gitlab-rails-ce-18.1All versions (No fix recorded)
gitlab-rails-ce-18.10All versions (No fix recorded)
gitlab-rails-ce-18.11All versions (No fix recorded)
gitlab-rails-ce-18.5All versions (No fix recorded)
gitlab-rails-ce-18.6All versions (No fix recorded)
gitlab-rails-ce-18.7All versions (No fix recorded)
gitlab-rails-ce-18.8All versions (No fix recorded)
gitlab-rails-ce-18.9All versions (No fix recorded)
gitlab-rails-ce-19.0All versions (No fix recorded)
gitlab-rails-ce-19.1All versions (No fix recorded)
gitlab-rails-ce-19.2< 19.2.6-r7
gitlab-rails-ce-19.3< 19.3.1-r8
gitlab-rails-ce-fips-18.1All versions (No fix recorded)
gitlab-rails-ce-fips-18.10< 18.10.8-r8
gitlab-rails-ce-fips-18.11< 18.11.12-r2
gitlab-rails-ce-fips-18.5All versions (No fix recorded)
gitlab-rails-ce-fips-18.6All versions (No fix recorded)
gitlab-rails-ce-fips-18.7All versions (No fix recorded)
gitlab-rails-ce-fips-18.8All versions (No fix recorded)
gitlab-rails-ce-fips-18.9< 18.9.8-r8
gitlab-rails-ce-fips-19.0< 19.0.9-r3
gitlab-rails-ce-fips-19.1< 19.1.8-r5 | All versions (No fix recorded)
gitlab-rails-ce-fips-19.2< 19.2.6-r7
gitlab-rails-ce-fips-19.3< 19.3.1-r6
jitsucom-jitsu< 2.8.2-r2
jitsucom-jitsu-console< 2.8.2-r2
jitsucom-jitsu-rotor< 2.8.2-r2
katib-earlystopping< 0.19.0-r31
katib-suggestion-goptuna-compatAll versions (No fix recorded)
katib-suggestion-hyperband< 0.19.0-r31
katib-suggestion-hyperopt< 0.19.0-r40 | < 0.19.0-r31
katib-suggestion-nas-darts< 0.19.0-r31
katib-suggestion-nas-enas< 0.19.0-r31
katib-suggestion-optuna-enas< 0.19.0-r31
katib-suggestion-pbt-enas< 0.19.0-r31
katib-suggestion-skopt-enas< 0.19.0-r31
katib-tfevent-metricscollector< 0.19.0-r31
kibana-7< 7.17.25-r1
kubeflow-centraldashboard< 1.9.1-r1
kubeflow-pipelines< 2.4.0-r9
kubeflow-pipelines-apiserver< 2.4.0-r9
kubeflow-pipelines-cache_server< 2.4.0-r9
kubeflow-pipelines-cache-deployer< 2.4.0-r9
kubeflow-pipelines-cache-deployer-compat< 2.4.0-r9
kubeflow-pipelines-frontend< 2.4.0-r9
kubeflow-pipelines-metadata-envoy-config< 2.4.0-r9
kubeflow-pipelines-metadata-writer< 2.4.0-r9
kubeflow-pipelines-metadata-writer-compat< 2.4.0-r9
kubeflow-pipelines-persistence_agent< 2.4.0-r9
kubeflow-pipelines-scheduledworkflow< 2.4.0-r9
kubeflow-pipelines-viewer-crd-controller< 2.4.0-r9
opensearch-dashboards-2< 2.19.1-r3
opensearch-dashboards-2-alerting-dashboards-plugin< 2.19.1-r3
opensearch-dashboards-2-anomaly-detection-dashboards-plugin< 2.19.1-r3
opensearch-dashboards-2-config< 2.19.1-r3
opensearch-dashboards-2-dashboards-maps< 2.19.1-r3
opensearch-dashboards-2-dashboards-notifications< 2.19.1-r3
opensearch-dashboards-2-dashboards-observability< 2.19.1-r3
opensearch-dashboards-2-dashboards-query-workbench< 2.19.1-r3
opensearch-dashboards-2-dashboards-reporting< 2.19.1-r3
opensearch-dashboards-2-dashboards-search-relevance< 2.19.1-r3
opensearch-dashboards-2-dashboards-visualizations< 2.19.1-r3
opensearch-dashboards-2-fips< 2.17.1-r0
opensearch-dashboards-2-fips-alerting-dashboards-plugin< 2.17.1-r0
opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin< 2.17.1-r0
opensearch-dashboards-2-fips-config< 2.17.1-r0
opensearch-dashboards-2-fips-dashboards-maps< 2.17.1-r0
opensearch-dashboards-2-fips-dashboards-notifications< 2.17.1-r0
opensearch-dashboards-2-fips-dashboards-observability< 2.17.1-r0
opensearch-dashboards-2-fips-dashboards-query-workbench< 2.17.1-r0
opensearch-dashboards-2-fips-dashboards-reporting< 2.17.1-r0
opensearch-dashboards-2-fips-dashboards-search-relevance< 2.17.1-r0
opensearch-dashboards-2-fips-dashboards-visualizations< 2.17.1-r0
opensearch-dashboards-2-fips-index-management-dashboards-plugin< 2.17.1-r0
opensearch-dashboards-2-fips-ml-commons-dashboards< 2.17.1-r0
opensearch-dashboards-2-fips-security-analytics-dashboards-plugin< 2.17.1-r0
opensearch-dashboards-2-fips-security-dashboards-plugin< 2.17.1-r0
opensearch-dashboards-2-index-management-dashboards-plugin< 2.19.1-r3
opensearch-dashboards-2-ml-commons-dashboards< 2.19.1-r3
opensearch-dashboards-2-security-analytics-dashboards-plugin< 2.19.1-r3
opensearch-dashboards-2-security-dashboards-plugin< 2.19.1-r3
sqlpad< 7.5.2-r2
sqlpad-compat< 7.5.2-r2
thingsboard< 3.9.1-r2
thingsboard-tb-js-executor< 3.9.1-r2
thingsboard-tb-mqtt-transport< 3.9.1-r2
thingsboard-tb-node< 3.9.1-r2
thingsboard-tb-web-ui< 3.9.1-r2

Show all 95

Wolfi34 products

argo-workflows< 3.6.0-r1
jitsucom-jitsu< 2.8.2-r2
jitsucom-jitsu-console< 2.8.2-r2
jitsucom-jitsu-rotor< 2.8.2-r2
katib-earlystopping< 0.19.0-r31

Show all 34

Debian1 product

node-cookieAll versions (No fix recorded) | < 0.7.1+~0.6.0-1

Jshttp1 product

cookie< 0.7.0

Npm1 product

cookie< 0.7.0

Ubuntu1 product

node-cookieAll versions (No fix recorded)

6 vendors · 133 products

References

9 links

github.com/jshttp/cookie/security/advisories/GHSA-pxg6-pf52-xh8xX Refsource CONFIRMREPORTAdvisoryWEB
github.com/jshttp/cookie/pull/167X Refsource MISCREPORTFIXWEB
github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5cX Refsource MISCREPORTFIXWEB
ubuntu.com/security/CVE-2024-47764REPORT
www.cve.org/CVERecord?id=CVE-2024-47764REPORT
security-tracker.debian.org/tracker/CVE-2024-47764Advisory
github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47764.jsonAdvisory
nvd.nist.gov/vuln/detail/CVE-2024-47764AdvisoryOval
github.com/jshttp/cookiePACKAGE

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities