VDB
CVE-2023-30584
CVE-2023-30584
PUBLISHED
CVSS 8.699999809265137 HIGH
A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of path traversal bypass when verifying file permissions. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.
EPSS 0.01% · 2.0th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.01%
2.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | node | 20.0.0 |
| Bitnami | node-min | 20.0.0, 20.0.0, 20.0.0 |
| Bitnami | node | 20.0.0, 20.0.0, 20.0.0 |
| Bitnami | node-min | 20.0.0 |
Timeline
- CVE Published
- Jul 20, 2023 PoC Published
- Sep 8, 2024 EPSS Score
- Sep 28, 2024 EPSS Score
- Oct 18, 2024 EPSS Score
- Nov 7, 2024 EPSS Score
- Nov 27, 2024 EPSS Score
- Dec 18, 2024 EPSS Score
- Jan 7, 2025 EPSS Score
- Jan 27, 2025 EPSS Score
- Feb 16, 2025 EPSS Score
- Mar 8, 2025 EPSS Score