DEBIAN-CVE-2023-23920

DEBIAN-CVE-2023-23920 PUBLISHED CVSS 4.199999809265137 MEDIUM

An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges.

Risk Scores

CVSS 3.1

4.199999809265137

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions
Debian:12	nodejs	, , 18.19.0+dfsg-5
Debian:11	nodejs	12.22.12~dfsg-1~deb11u2, 12.22.12~dfsg-1~deb11u3, 12.22.4~dfsg-1
Debian:14	nodejs	0, 0, 0
Debian:13	nodejs	0, 0, 0

Timeline

Feb 23, 2023 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2023-23920 advisory

Open in Interactive Console →