icon

We found results for “

CVE-2020-24025

Good to know:

icon
icon

Date: January 11, 2021

Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.

Language: JS

Severity Score

Severity Score

Weakness Type (CWE)

Improper Certificate Validation

CWE-295

Top Fix

icon

Upgrade Version

Upgrade to version doublesecretagency/craft-spoon - 3.2.5;cloudscribe.templates - 5.2.0;narirock/marrs-catalog - no_fix;GR.PageRender.Razor - 1.8.0;greenpeace/planet4-child-theme-storytelling - v0.12;greenpeace/planet4-child-theme-storytelling - dev-old-ui;greenpeace/planet4-child-theme-storytelling - v0.9.7;miljoen/nova-autofill - no_fix;miljoen/nova-autofill - v1.0.0;oburatongoi/productivity - 0.0.13;oburatongoi/productivity - 0.0.1;oburatongoi/productivity - no_fix;islandora/islandora_starter_theme - dev-main;islandora/islandora_starter_theme - dev-don_patch;islandora/islandora_starter_theme - dev-bd-d9-update;flexxia/flexprimeng - dev-update-angularjs;flexxia/flexprimeng - dev-dependabot/npm_and_yarn/css/postcss/y18n-3.2.2;seidemann-web/wave-theme - no_fix;seidemann-web/wave-theme - dev-fixUpLanguageConstants;seidemann-web/wave-theme - dev-WT-36/Sticky-Header-Fixes;seidemann-web/wave-theme - dev-omage-theme;angellco/spoon - 3.2.5;acquia/acquia_cms - 2020-11-05;acquia/acquia_cms - 2020-11-17;acquia/acquia_cms - 2020-10-11;kayrules/solatjakim-api-site - dev-version-1.0;Fable.Template.Elmish.React - 0.1.6;tombeachell/forza-magento - no_fix;MIDIator.WebClient - 1.0.105;saphyr-solutions/saphyr-web-generator - 1.0.x-dev;saphyr-solutions/saphyr-web-generator - no_fix;saphyr-solutions/saphyr-web-generator - dev-ppe;i-saad-salman/statamic-analytics - no_fix;chrisbraybrooke/laravel-ecommerce - dev-form-field-key;chrisbraybrooke/laravel-ecommerce - 0.0.56;chrisbraybrooke/laravel-ecommerce - 0.0.2;chrisbraybrooke/laravel-ecommerce - 0.0.17;OctoWeb01 - no_fix;scancode/portal-module - dev-dependabot/npm_and_yarn/Resources/assets/coreui/decode-uri-component-0.2.2;scancode/portal-module - v1.0.12;scancode/portal-module - dev-dependabot/npm_and_yarn/Resources/assets/coreui/path-parse-1.0.7;islandora/islandora_base_theme - dev-bd-d9-updates;islandora/islandora_base_theme - no_fix;islandora/islandora_base_theme - dev-thumbnail-speed-patch;anupsathya/umd_bootstrap_sass - no_fix;basic-builder/easybuilder-bundle - v0.0.3;zymawy/ironside-core - dev-utils;gheb/nn - dev-master;kraenkvisuell/nova-cms-media - v1.0.3;kraenkvisuell/nova-cms-media - v1.2.2;kraenkvisuell/nova-cms-media - no_fix;pwptemplatepusintek - no_fix;platformatory/opendevx - no_fix;rjzaar/opencourse - no_fix;rjzaar/opencourse - dev-julprod;trezebits/trezevel-gallery - no_fix;stephane888/generate_style_theme - 1.0.1;ilhanet/erpnet-widget-resource - no_fix;OctoWeb - no_fix;oxid-esales/wave-theme - dev-oxscript-google-analytics;yivic/yivic-elce - no_fix;archambaultalex/image-field - no_fix;PWPTemplateCMS - no_fix;ViewPacker - 1.0.18;node-sass - 7.0.0;mmi/mmi-cms - 2.3.1;org.webjars.npm:node-sass:no_fix

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us