Is CVE-2024-43800 in the CISA KEV catalog?

No. CVE-2024-43800 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-43800?

CVE-2024-43800 has a CVSS v3 base score of 5.0 (MEDIUM).

What is the EPSS score for CVE-2024-43800?

CVE-2024-43800 has an EPSS score of 0.60% (44th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-43800?

Upgrade node-serve-static on debian 13 to 2.1.0+~1.15.7-1 or later. Fixes are available for 185 affected products.

CVE & CISA-KEV Catalog

CVE-2024-43800

MEDIUM

5.0

CVSS v3

NVD

Description

serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.

CWE-79Cross-Site Scripting (XSS)

How to fix

Remediation Available

node-serve-staticDebian

Fixed in:2.1.0+~1.15.7-1CVE-2024-43800

discovery/discoveryRed Hat / RHEL

Fixed in:server-rhel9@sha256:b41eeb83e5c7ad9937a90ac6247fe5305a7ff90b39ae6a23765e0f2e22bdca70_arm64RHSA-2025:1249

Fixed in:server-rhel9@sha256:c6488740a778ca3a1aa3dfdc513d4989ac366728d9f93fe8a57a51c562270771_amd64RHSA-2025:1249

Fixed in:ui-rhel9@sha256:c6f7be7cb58e77958c518fdd68c80a745dcec48fa5397af8c68593254e03743a_amd64RHSA-2025:1249

Fixed in:ui-rhel9@sha256:c5a4ba16f7322e2b89fefa198dc673434f73709a47cf7a85bbccf1ba7a73dd7c_arm64RHSA-2025:1249

discovery/discoveryRocky

Fixed in:ui-rhel9@sha256:c6f7be7cb58e77958c518fdd68c80a745dcec48fa5397af8c68593254e03743a_amd64RHSA-2025:1249

Fixed in:server-rhel9@sha256:b41eeb83e5c7ad9937a90ac6247fe5305a7ff90b39ae6a23765e0f2e22bdca70_arm64RHSA-2025:1249

Fixed in:server-rhel9@sha256:c6488740a778ca3a1aa3dfdc513d4989ac366728d9f93fe8a57a51c562270771_amd64RHSA-2025:1249

Fixed in:ui-rhel9@sha256:c5a4ba16f7322e2b89fefa198dc673434f73709a47cf7a85bbccf1ba7a73dd7c_arm64RHSA-2025:1249

network-observability/network-observabilityRocky

Fixed in:operator-bundle@sha256:ccf531d1181ccd1c6eb9ec45ea20069aa01b2924242596f25e551d055c9a0e1b_ppc64leRHSA-2024:8014

Fixed in:cli-rhel9@sha256:1587047e407a77f7ac1d963cc9bbfdb5c2472554cad8367f0a96a4699528134d_ppc64leRHSA-2024:8014

Fixed in:rhel9-operator@sha256:349de1a5389f131933bf39235705a4aa8137a8d4be561f66aa2b74f986489fba_amd64RHSA-2024:8014

Fixed in:operator-bundle@sha256:3a3c70c990bd3a012453857698433d674b98445e55cc9c5c4ed38eea29eb82b1_amd64RHSA-2024:8014

Fixed in:rhel9-operator@sha256:9c2c0e0b8f9c061983f48fca9c18d7a496d38fbc4f8b9274d2fef39a5824c40a_ppc64leRHSA-2024:8014

Fixed in:operator-bundle@sha256:268ac72b4a0bf05893cca0924a80ebd2107f3e859329406257da6ce59ec08dfe_arm64RHSA-2024:8014

Fixed in:cli-rhel9@sha256:7c2c2c0c0c255c1ef1579b63337d35174a330374a7deaff3c3c1e39ff48e89ee_amd64RHSA-2024:8014

Fixed in:rhel9-operator@sha256:8c5836a79d4f6562ed17db8488422db567f4a920908e1800b770ec04ffa78080_arm64RHSA-2024:8014

Fixed in:cli-rhel9@sha256:bd8b5a7f1f9369c1f6fe3782c79b4145c3467b3f82e083e1eb83d76a8df21fdd_s390xRHSA-2024:8014

Fixed in:operator-bundle@sha256:c32c5ec7c6048f652200677c2a9cbde09ed05beeb818e292f21e6a52786b0a02_s390xRHSA-2024:8014

Fixed in:rhel9-operator@sha256:4f9cdf8c1c22a79d0690b18c363ade514262510f5fbb4062746210005e832134_s390xRHSA-2024:8014

Fixed in:cli-rhel9@sha256:c469d89f77d04b257c6bf9814a3782540139e35c83ac73c2e5820c20ec2146fd_arm64RHSA-2024:8014

network-observability/network-observabilityRed Hat / RHEL