VDB
BDU%3A2024-09774
BDU%3A2024-09774
PUBLISHED
CVSS 5 MEDIUM
Уязвимость функции fs.statfs программной платформы Node.js, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Сообщество свободного программного обеспечения, Fedora Project, Node.js Foundation | openSUSE Tumbleweed, Debian GNU/Linux, Fedora, Node.js |
Timeline
- Nov 18, 2024 CVE Published
References
- https://nodejs.org/en/blog/vulnerability/august-2023-security-releases url
- https://nodejs.org/en/blog/release/v20.5.1/ url
- https://www.suse.com/security/cve/CVE-2023-32005.html url
- https://hackerone.com/reports/2051224 url
- https://security.netapp.com/advisory/ntap-20231103-0004/ url
- https://vuldb.com/?id.236822 url
- https://security-tracker.debian.org/tracker/CVE-2023-32005 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX/ advisory