CVE-2019-15604

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

20.46% chance of exploitation in the next 30 days, 97th percentile

Published

2020-02-07

Updated

2025-04-30

Proof-of-concept exploits (1)

• https://hackerone.com/reports/746733

References

• CVE Record
• NVD entry

Related

• CVE-2019-15603
• CVE-2019-15605
• CVE-2019-15602
• CVE-2019-15606
• CVE-2019-15598
• CVE-2019-15607