VDB
BDU%3A2024-08682
BDU%3A2024-08682
PUBLISHED
CVSS 9 CRITICAL
Уязвимость конфигурации experimental-permission программной платформы Node.js, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
9
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Fedora Project, Node.js Foundation | Debian GNU/Linux, Fedora, Node.js |
Timeline
- Oct 29, 2024 CVE Published
References
- https://hackerone.com/reports/2104564 url
- https://hackerone.com/reports/2038134 url
- https://security-tracker.debian.org/tracker/CVE-2023-32004 url
- https://access.redhat.com/security/cve/CVE-2023-32004 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK/ url
- https://security.netapp.com/advisory/ntap-20230915-0009/ url
- https://github.com/nodejs/node/commit/1f64147eb607f82060e08884f993597774c69280 url
- https://nodejs.org/api/cli.html#--experimental-permission url
- https://nodejs.org/en/blog/vulnerability/august-2023-security-releases advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX/ advisory