Vulnerability in Apache Skywalking Nodejs Agent
CVE-2022-36127
A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.
EPSS: 0.017 (75.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Apache Skywalking_nodejs_agent
- Apache Software Foundation Skywalking Nodejs Agent — versions Apache SkyWalking NodeJS Agent
References
- security@apache.org (Mailing List, x_refsource_MISC, Release Notes, Vendor Advisory)
- security@apache.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-36127?
- CVE-2022-36127 is a high-severity vulnerability in Apache Skywalking Nodejs Agent. CVSS score: 7.5/10. Published 2022-07-18.
- How severe is CVE-2022-36127?
- High severity. CVSS v3 base score is 7.5 out of 10.