CNNVD-202509-2618 Information
Sep 16, 2025
cve
CNNVD ID
CNNVD-202509-2618
Related CVE
- CNNVD Published: 2025-09-16
Description (Chinese)
node-ip是indutny个人开发者的一个 node.js 模块。 node-ip 2.0.1及之前版本存在代码问题漏洞，该漏洞源于IP地址017700000001被错误分类为全局可路由，可能导致服务端请求伪造。
Description (English)
Node-ip is a node.js module for the industny personal developer. Node-ip 2.0.1 and previous versions had a code gap, which stemmed from the fact that the IP address 0177000001 had been misclassifiable as a global route, which could lead to the forgery of service requests.
Hazard Level
Critical
Vulnerability Type
代码问题
Affected Vendor
个人开发者
Published
2025-09-16
Last Modified
2026-02-24
References
https://cosmosofcyberspace.github.io/CVE-Application-Document.html https://github.com/indutny/node-ip/issues/160
Share on: