H1-2104567 — Vulnetix

H1-2104567 PUBLISHED

(CVE-2023-32003) fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks

Exploit Intelligence

(CVE-2023-32003) fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks (hackerone)
(CVE-2023-32003) fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks (hackerone)

Timeline

Oct 7, 2023 CVE Published
Oct 7, 2023 PoC Published

References

(CVE-2023-32003) fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›