VDB
CVE-2023-30584
CVE-2023-30584
PUBLISHED
CVSS 7.699999809265137 HIGH
A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of path traversal bypass when verifying file permissions. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.
EPSS 0.34% · 26.3th percentile
Risk Scores
CVSS 3.1
7.699999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.34%
26.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | node | 20.0.0 |
| Bitnami | node-min | 20.0.0, 20.0.0, 20.0.0 |
| Bitnami | node | 20.0.0, 20.0.0, 20.0.0 |
| Bitnami | node-min | 20.0.0 |
Timeline
- CVE Published
- Jul 20, 2023 PoC Published
- Sep 8, 2024 EPSS Score
- Sep 29, 2024 EPSS Score
- Oct 19, 2024 EPSS Score
- Nov 9, 2024 EPSS Score
- Nov 30, 2024 EPSS Score
- Dec 22, 2024 EPSS Score
- Jan 11, 2025 EPSS Score
- Feb 1, 2025 EPSS Score
- Feb 22, 2025 EPSS Score
- Mar 15, 2025 EPSS Score