VDB
BDU%3A2024-09200
BDU%3A2024-09200
PUBLISHED
CVSS 5 MEDIUM
Уязвимость методов fs.mkdtemp() и fs.mkdtempSync() программной платформы Node.js, позволяющая нарушителю создать произвольный каталог
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Сообщество свободного программного обеспечения, Fedora Project, Node.js Foundation | openSUSE Tumbleweed, Debian GNU/Linux, Fedora, Node.js |
Timeline
- Nov 8, 2024 CVE Published
References
- https://nodejs.org/en/blog/vulnerability/august-2023-security-releases url
- https://security-tracker.debian.org/tracker/CVE-2023-32003 url
- https://www.suse.com/security/cve/CVE-2023-32003.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX/ url
- https://security.netapp.com/advisory/ntap-20230915-0009/ url
- https://hackerone.com/reports/2037887 url
- https://security.snyk.io/vuln/SNYK-UPSTREAM-NODE-5837451 url
- https://vuldb.com/?id.236823 url
- https://nodejs.org/en/blog/release/v20.5.1/ advisory