VDB

CVE-2023-32004

CVE-2023-32004 PUBLISHED

A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions. This vulnerability affects all users using the experimental permission model in Node.js 20. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.

EPSS 0.12% · 30.2th percentile

Risk Scores

EPSS Score
0.12%
30.2th percentile

Affected Products

VendorProductVersions
Bitnaminode20.0.0
Bitnaminode20.0.0, 20.0.0, 20.0.0
Bitnaminode-min20.0.0, 20.0.0, 20.0.0
Bitnaminode-min20.0.0

Exploit Intelligence

Timeline

  • CVE Published
  • Aug 11, 2023 PoC Published
  • Aug 16, 2023 EPSS Score
  • Sep 18, 2023 EPSS Score
  • Oct 7, 2023 PoC Published
  • Oct 22, 2023 EPSS Score
  • Dec 28, 2023 EPSS Score
  • Jan 30, 2024 EPSS Score
  • Mar 3, 2024 EPSS Score
  • Apr 6, 2024 EPSS Score
  • May 9, 2024 EPSS Score
  • Jul 15, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›