CVE & CISA-KEV CatalogNVD
CVE-2022-24785
HIGHEPSS 92th pctl7.5
CVSS v3
Description
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js.
How to fix
Remediation Available
node-momentDebian
Fixed in:2.29.1+ds-2+deb11u1CVE-2022-24785
Fixed in:2.29.2+ds-1CVE-2022-24785
Fixed in:2.29.2+ds-1CVE-2022-24785
Fixed in:2.29.2+ds-1CVE-2022-24785
eap7-activemq-artemisRocky
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemisRed Hat / RHEL
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-cliRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-cliRocky
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-commonsRocky
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-commonsRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-core-clientRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-core-clientRocky
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-dtoRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-dtoRocky
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-hornetq-protocolRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-hornetq-protocolRocky
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-hqclient-protocolRocky
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-hqclient-protocolRed Hat / RHEL
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-jdbc-storeRocky
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-jdbc-storeRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-jms-clientRocky
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-jms-clientRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-jms-serverRed Hat / RHEL
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-jms-serverRocky
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-journalRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-journalRocky
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-nativeRocky
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-nativeRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-raRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-raRocky
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-selectorRocky
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-selectorRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-serverRed Hat / RHEL
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-serverRocky
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-service-extensionsRed Hat / RHEL
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-activemq-artemis-service-extensionsRocky
Fixed in:0:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-toolsRed Hat / RHEL
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-activemq-artemis-toolsRocky
Fixed in:0:2.9.0-10.redhat_00021.1.el7eapRHSA-2025:4437
eap7-artemis-nativeRocky
Fixed in:1:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:1:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-artemis-nativeRed Hat / RHEL
Fixed in:1:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:1:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-artemis-native-debuginfoRocky
Fixed in:1:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-artemis-native-debuginfoRed Hat / RHEL
Fixed in:1:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-artemis-native-wildflyRed Hat / RHEL
Fixed in:1:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-artemis-native-wildflyRocky
Fixed in:1:1.5.5.016-1.redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-gsonRed Hat / RHEL
Fixed in:0:2.8.9-1.redhat_00001.1.el7eapRHSA-2025:4437
Fixed in:0:2.8.9-1.redhat_00001.1.el7eapRHSA-2025:4437
eap7-gsonRocky
Fixed in:0:2.8.9-1.redhat_00001.1.el7eapRHSA-2025:4437
Fixed in:0:2.8.9-1.redhat_00001.1.el7eapRHSA-2025:4437
eap7-hal-consoleRocky
Fixed in:0:3.2.18-1.Final_redhat_00001.1.el7eapRHSA-2025:4437
Fixed in:0:3.2.18-1.Final_redhat_00001.1.el7eapRHSA-2025:4437
eap7-hal-consoleRed Hat / RHEL
Fixed in:0:3.2.18-1.Final_redhat_00001.1.el7eapRHSA-2025:4437
Fixed in:0:3.2.18-1.Final_redhat_00001.1.el7eapRHSA-2025:4437
eap7-jboss-server-migrationRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migrationRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-cliRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-cliRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-coreRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-coreRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap6.4Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap6.4Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap6.4-to-eap7.3Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap6.4-to-eap7.3Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.0Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.0Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.1Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.1Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.2Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.2Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.2-to-eap7.3Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.2-to-eap7.3Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.3-serverRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-eap7.3-serverRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly10.0Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly10.0Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly10.1Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly10.1Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly11.0Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly11.0Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly12.0Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly12.0Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly13.0-serverRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly13.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly14.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly14.0-serverRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly15.0-serverRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly15.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly16.0-serverRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly16.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly17.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly17.0-serverRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly18.0-serverRocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly18.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly8.2Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly8.2Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly9.0Red Hat / RHEL
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-server-migration-wildfly9.0Rocky
Fixed in:0:1.7.2-14.Final_redhat_00015.1.el7eapRHSA-2025:4437
eap7-jboss-xnio-baseRed Hat / RHEL
Fixed in:0:3.7.14-3.Final_redhat_00001.1.el7eapRHSA-2025:4437
Fixed in:0:3.5.11-1.Final_redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:3.7.14-3.Final_redhat_00001.1.el7eapRHSA-2025:4437
Fixed in:0:3.5.11-1.Final_redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-jboss-xnio-baseRocky
Fixed in:0:3.5.11-1.Final_redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:3.5.11-1.Final_redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:3.7.14-3.Final_redhat_00001.1.el7eapRHSA-2025:4437
Fixed in:0:3.7.14-3.Final_redhat_00001.1.el7eapRHSA-2025:4437
eap7-jsoupRocky
Fixed in:0:1.14.2-1.redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:1.14.2-1.redhat_00002.1.ep7.el7RHSA-2025:4226
eap7-jsoupRed Hat / RHEL
Fixed in:0:1.14.2-1.redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:1.14.2-1.redhat_00002.1.ep7.el7RHSA-2025:4226
eap7-undertowRocky
Fixed in:0:1.4.18-14.SP13_redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:1.4.18-14.SP13_redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-undertowRed Hat / RHEL
Fixed in:0:1.4.18-14.SP13_redhat_00001.1.ep7.el7RHSA-2025:4226
Fixed in:0:1.4.18-14.SP13_redhat_00001.1.ep7.el7RHSA-2025:4226
eap7-wildflyRocky
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
Fixed in:0:7.1.10-2.GA_redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:7.1.10-2.GA_redhat_00002.1.ep7.el7RHSA-2025:4226
eap7-wildflyRed Hat / RHEL
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
Fixed in:0:7.1.10-2.GA_redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
Fixed in:0:7.1.10-2.GA_redhat_00002.1.ep7.el7RHSA-2025:4226
eap7-wildfly-java-jdk11Rocky
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
eap7-wildfly-java-jdk11Red Hat / RHEL
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
eap7-wildfly-java-jdk8Red Hat / RHEL
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
eap7-wildfly-java-jdk8Rocky
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
eap7-wildfly-javadocsRocky
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
eap7-wildfly-javadocsRed Hat / RHEL
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
eap7-wildfly-modulesRocky
Fixed in:0:7.1.10-2.GA_redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
eap7-wildfly-modulesRed Hat / RHEL
Fixed in:0:7.3.13-4.GA_redhat_00002.1.el7eapRHSA-2025:4437
Fixed in:0:7.1.10-2.GA_redhat_00002.1.ep7.el7RHSA-2025:4226
eap7-woodstox-coreRocky
Fixed in:0:5.0.3-2.redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:6.4.0-1.redhat_00001.1.el7eapRHSA-2025:4437
Fixed in:0:5.0.3-2.redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:6.4.0-1.redhat_00001.1.el7eapRHSA-2025:4437
eap7-woodstox-coreRed Hat / RHEL
Fixed in:0:5.0.3-2.redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:6.4.0-1.redhat_00001.1.el7eapRHSA-2025:4437
Fixed in:0:5.0.3-2.redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:6.4.0-1.redhat_00001.1.el7eapRHSA-2025:4437
eap7-xml-securityRed Hat / RHEL
Fixed in:0:2.0.10-2.redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.0.10-2.redhat_00002.1.ep7.el7RHSA-2025:4226
eap7-xml-securityRocky
Fixed in:0:2.0.10-2.redhat_00002.1.ep7.el7RHSA-2025:4226
Fixed in:0:2.0.10-2.redhat_00002.1.ep7.el7RHSA-2025:4226
rhceph/keepalivedRocky
Fixed in:rhel9@sha256:2ae4274163155d880cbd41d1a197d6856f326501a50e028ff3de9ff8a85b3e97_s390xRHSA-2023:3642
Fixed in:rhel9@sha256:36abd2b22ebabea813c5afde35b0b80a200056f811267e89f0270da9155b1a22_ppc64leRHSA-2023:3642
Fixed in:rhel9@sha256:b21d882fd2d08d6f162dbb63e0626d9d6aa892a677c5a28edc97b84feef1655a_amd64RHSA-2023:3642
rhceph/keepalivedRed Hat / RHEL
Fixed in:rhel9@sha256:b21d882fd2d08d6f162dbb63e0626d9d6aa892a677c5a28edc97b84feef1655a_amd64RHSA-2023:3642
Fixed in:rhel9@sha256:36abd2b22ebabea813c5afde35b0b80a200056f811267e89f0270da9155b1a22_ppc64leRHSA-2023:3642
Fixed in:rhel9@sha256:2ae4274163155d880cbd41d1a197d6856f326501a50e028ff3de9ff8a85b3e97_s390xRHSA-2023:3642
rhceph/rhcephRed Hat / RHEL
Fixed in:promtail-rhel9@sha256:f52fd8d5fbfdcc202c5e31096119377a8b87f9efd31602398d45cec86ec35940_ppc64leRHSA-2023:3642
Fixed in:promtail-rhel9@sha256:b46c0196fab3bd3a60b64a1d7ff8af6fbc7c3e526618da1cc78032bffa3be171_amd64RHSA-2023:3642
Fixed in:haproxy-rhel9@sha256:e4da2c9d53159d43c6795151eb3c9dea373da19b34d76094b60e7a2466415d62_s390xRHSA-2023:3642
Fixed in:6-rhel9@sha256:72bd6eb932a368af10d5c607d8b60e0fe8b87862f4adaa17fd022a3427a46ca8_s390xRHSA-2023:3642
Fixed in:promtail-rhel9@sha256:44697ad0d15d1f37b98243f5f013cb9271d70e2b10ab52093a1d7e3409a674b2_s390xRHSA-2023:3642
Fixed in:haproxy-rhel9@sha256:8cc4a146d7be5046b416fe9c04d77b4f0a25a2ab7180fdbf8c46cff8e2483080_ppc64leRHSA-2023:3642
Fixed in:6-rhel9@sha256:9b477366f861df49b533d95941b9770b032827bb4a259c5f86abce8705960c05_ppc64leRHSA-2023:3642
Fixed in:haproxy-rhel9@sha256:720b3207087d4feb8ab59ffd0b70d6bc22fa21d53b62393779dfaf8972a32e60_amd64RHSA-2023:3642
Fixed in:6-rhel9@sha256:953630d9f9924f17ab7ce168772c3facbaf6866b79a1cf0fb9aee1dcf6eb8c7d_amd64RHSA-2023:3642
rhceph/rhcephRocky
Fixed in:6-rhel9@sha256:72bd6eb932a368af10d5c607d8b60e0fe8b87862f4adaa17fd022a3427a46ca8_s390xRHSA-2023:3642
Fixed in:haproxy-rhel9@sha256:e4da2c9d53159d43c6795151eb3c9dea373da19b34d76094b60e7a2466415d62_s390xRHSA-2023:3642
Fixed in:haproxy-rhel9@sha256:8cc4a146d7be5046b416fe9c04d77b4f0a25a2ab7180fdbf8c46cff8e2483080_ppc64leRHSA-2023:3642
Fixed in:6-rhel9@sha256:9b477366f861df49b533d95941b9770b032827bb4a259c5f86abce8705960c05_ppc64leRHSA-2023:3642
Fixed in:promtail-rhel9@sha256:f52fd8d5fbfdcc202c5e31096119377a8b87f9efd31602398d45cec86ec35940_ppc64leRHSA-2023:3642
Fixed in:haproxy-rhel9@sha256:720b3207087d4feb8ab59ffd0b70d6bc22fa21d53b62393779dfaf8972a32e60_amd64RHSA-2023:3642
Fixed in:6-rhel9@sha256:953630d9f9924f17ab7ce168772c3facbaf6866b79a1cf0fb9aee1dcf6eb8c7d_amd64RHSA-2023:3642
Fixed in:promtail-rhel9@sha256:b46c0196fab3bd3a60b64a1d7ff8af6fbc7c3e526618da1cc78032bffa3be171_amd64RHSA-2023:3642
Fixed in:promtail-rhel9@sha256:44697ad0d15d1f37b98243f5f013cb9271d70e2b10ab52093a1d7e3409a674b2_s390xRHSA-2023:3642
rhceph/rhceph-6Rocky
Fixed in:dashboard-rhel9@sha256:1d7ca201b778e6a6cb559129e240233b6b6461399c67f979c07d5fe288c400f6_amd64RHSA-2023:3642
Fixed in:dashboard-rhel9@sha256:3fb7480f9d68333e168eae0c9fbeceb0df7962a40c25ecced81ea4c4959b2c25_s390xRHSA-2023:3642
Fixed in:dashboard-rhel9@sha256:50329da263e8ef00c47632156761621bac30fead5e574ef23cd1d30b7af0019a_ppc64leRHSA-2023:3642
rhceph/rhceph-6Red Hat / RHEL
Fixed in:dashboard-rhel9@sha256:3fb7480f9d68333e168eae0c9fbeceb0df7962a40c25ecced81ea4c4959b2c25_s390xRHSA-2023:3642
Fixed in:dashboard-rhel9@sha256:50329da263e8ef00c47632156761621bac30fead5e574ef23cd1d30b7af0019a_ppc64leRHSA-2023:3642
Fixed in:dashboard-rhel9@sha256:1d7ca201b778e6a6cb559129e240233b6b6461399c67f979c07d5fe288c400f6_amd64RHSA-2023:3642
rhceph/snmpRed Hat / RHEL
Fixed in:notifier-rhel9@sha256:9078b49846d8ec681bec5b96f0d4087b4c66bdc6baf4701cfc9c8e8aeae89661_amd64RHSA-2023:3642
Fixed in:notifier-rhel9@sha256:8887234fbbaddf620eaa7b0f4b1ed6ab8aa5bc52e019e67179554ccd03fba676_ppc64leRHSA-2023:3642
Fixed in:notifier-rhel9@sha256:df7c89608fe8352d445efcc1017521b35878cfe61a8b9fd91fab24c00786b2bf_s390xRHSA-2023:3642
rhceph/snmpRocky
Fixed in:notifier-rhel9@sha256:8887234fbbaddf620eaa7b0f4b1ed6ab8aa5bc52e019e67179554ccd03fba676_ppc64leRHSA-2023:3642
Fixed in:notifier-rhel9@sha256:9078b49846d8ec681bec5b96f0d4087b4c66bdc6baf4701cfc9c8e8aeae89661_amd64RHSA-2023:3642
Fixed in:notifier-rhel9@sha256:df7c89608fe8352d445efcc1017521b35878cfe61a8b9fd91fab24c00786b2bf_s390xRHSA-2023:3642
libjs-momentUbuntu
Fixed in:2.20.1+ds-1ubuntu0.1USN-5559-1
Fixed in:2.24.0+ds-2ubuntu0.1USN-5559-1
Fixed in:2.29.1+ds-3ubuntu0.2USN-5559-1
node-momentUbuntu
Fixed in:2.20.1+ds-1ubuntu0.1USN-5559-1
Fixed in:2.24.0+ds-2ubuntu0.1USN-5559-1
Fixed in:2.29.1+ds-3ubuntu0.2USN-5559-1
TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploit Intelligence
5.52%probability of exploitation in 30 days
92ndpercentile
High risk: more likely to be exploited than 92% of all known CVEs.
References
Patch2
Vendor Advisory1
Third-Party Advisory2
Other references3
Related Vulnerabilities
Other CWE-22 (Path Traversal) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2024-23897 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2023-32315 | High | 8.6 | 100% | KEV | Fix |
| CVE-2022-29464 | Critical | 9.8 | 100% | KEV + Ransom | - |
| CVE-2021-26086 | Medium | 5.3 | 100% | KEV | Fix |
| CVE-2021-22005 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2020-5902 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
Common questions
How do I fix CVE-2022-24785?
Published advisories record a fix for 119 affected products. The "How to fix" section on this page lists the fixed version and source advisory for each one, so apply the entry matching what you actually run.
Is CVE-2022-24785 being actively exploited?
Not that we know of. CVE-2022-24785 is not in the CISA Known Exploited Vulnerabilities catalog. Its EPSS score of 5.5% is the estimated probability that it will be exploited in the next 30 days. That is higher than 92% of all scored CVEs.
How severe is CVE-2022-24785?
CVE-2022-24785 has a CVSS v3 base score of 7.5, rated high. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.
What does CVE-2022-24785 affect?
Published advisories record a fix for node-moment (Debian), eap7-activemq-artemis (Rocky), eap7-activemq-artemis (Red Hat / RHEL), eap7-activemq-artemis-cli (Red Hat / RHEL), and 115 more. Only products with a sourced advisory are listed, so treat this as what we can cite rather than a complete inventory.
Embed a live status badge for CVE-2022-24785
Markdown
[](https://tridentstack.com/cve/CVE-2022-24785)HTML
<a href="https://tridentstack.com/cve/CVE-2022-24785"><img src="https://tridentstack.com/cve/badge/CVE-2022-24785.svg" alt="CVE-2022-24785"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-11-03.