Vulnetix
Try Vulnetix Request Demo
CVE-2017-14849 PUBLISHED

Reported by mitre · Published September 28, 2017

Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.

Affected Products

VendorProductVersions
n/an/an/a
n/an/an/a

Timeline

References

Open in Interactive Console →