CVE-2024-27922
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2024-27922 is a vulnerability that affects TOMP Bare Server versions prior to 2.0.2, specifically related to insecure handling of HTTP requests by the @tomphttp/bare-server-node package. This vulnerability exposes users of the package to potential manipulation of their web traffic. The impact may vary depending on the specific usage of the package, but it can potentially affect any system where this package is in use. The issue has been patched in version 2.0.2, although no specific workaround strategies have been disclosed at this time. The vulnerability has a base severity rating of CRITICAL with a base score of 9.8, indicating a high potential danger to organizations utilizing the affected products.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions