cve/2024/CVE-2024-57965.md

### [CVE-2024-57965](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57965)
![](https://img.shields.io/static/v1?label=Product&message=axios&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-346%20Origin%20Validation%20Error&color=brightgreen)

### Description

In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool and does not fix a vulnerability.

### POC

#### Reference
- https://github.com/axios/axios/issues/6351

#### Github
- https://github.com/NUS-ISS-SECURE-TEAM-5/mall-admin-frontend
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`### [CVE-2024-57965](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57965)`
Update CVE list 2025-09-29 21:09 2025-09-29 21:09:30 +02:00			`![](https://img.shields.io/static/v1?label=Product&message=axios&color=blue)`
			`![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)`
			`![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-346%20Origin%20Validation%20Error&color=brightgreen)`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00
			`### Description`

Update CVE list 2025-09-29 21:09 2025-09-29 21:09:30 +02:00			`In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool and does not fix a vulnerability.`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00
			`### POC`

			`#### Reference`
Update CVE list 2025-09-29 21:09 2025-09-29 21:09:30 +02:00			`- https://github.com/axios/axios/issues/6351`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00
			`#### Github`
			`- https://github.com/NUS-ISS-SECURE-TEAM-5/mall-admin-frontend`