Skip to content
OpenAdvisories
High ICSA-24-277-02 3 CVEs

Subnet Solutions Inc. PowerSYSTEM Center

Published Oct 1, 2024 · Updated Oct 1, 2024

Vendor: Subnet Solutions Product: PowerSYSTEM Center

Summary

Successful exploitation of these vulnerabilities could result in an attacker bypassing a proxy, creating a denial-of-service condition, or viewing sensitive information.

Vulnerabilities 3

  • High 7.5
    CVE-2021-3749 Public exploit

    Inefficient Regular Expression Complexity in axios/axios

    axios is vulnerable to Inefficient Regular Expression Complexity

    axios axios/axios node-axios node-axios Debian Ubuntu npm
  • Medium 6.5
    CVE-2023-45857 Public exploit

    Axios Cross-Site Request Forgery Vulnerability

    An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

    node-axios axios node-axios Debian Ubuntu npm
  • Medium 5.9
    CVE-2020-28168

    Axios vulnerable to Server-Side Request Forgery

    Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address.

    node-axios axios node-axios Debian Ubuntu npm

Revision history

  1. #1

    Initial Publication

References