CVE-2025-27210

🗓️ 18 Jul 2025 22:54:27Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 47 Views

Incomplete fix in Node.js affects Windows device names and impacts path.join API usage

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') due to Node.js ( CVE-2025-27210 )	30 Sep 202515:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in NodeJS affect IBM Business Automation Workflow Configuration Editor	11 Sep 202511:41	–	ibm
GithubExploit	Exploit for CVE-2025-27210	18 Jul 202511:57	–	githubexploit
GithubExploit	Exploit for CVE-2025-27210	16 Sep 202508:28	–	githubexploit
GithubExploit	Exploit for CVE-2025-27210	16 Jul 202505:33	–	githubexploit
Circl	CVE-2025-27210	16 Jul 202505:35	–	circl
CNNVD	Node.js 路径遍历漏洞	16 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-27210	18 Jul 202522:54	–	cvelist
Debian CVE	CVE-2025-27210	18 Jul 202522:54	–	debiancve
Exploit DB	NodeJS 24.x - Path Traversal	16 Jul 202500:00	–	exploitdb

Vulners

Node

nodejs nodeRange≤24.4.1

nodejs nodejsRange≤19

[
  {
    "defaultStatus": "unaffected",
    "vendor": "nodejs",
    "product": "node",
    "versions": [
      {
        "version": "20.0.0",
        "status": "affected",
        "lessThan": "20.19.4",
        "versionType": "semver"
      },
      {
        "version": "22.0.0",
        "status": "affected",
        "lessThan": "22.17.1",
        "versionType": "semver"
      },
      {
        "version": "24.0.0",
        "status": "affected",
        "lessThan": "24.4.1",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "nodejs",
    "product": "nodejs",
    "versions": [
      {
        "version": "4.0",
        "status": "affected",
        "lessThan": "4.*",
        "versionType": "semver"
      },
      {
        "version": "5.0",
        "status": "affected",
        "lessThan": "5.*",
        "versionType": "semver"
      },
      {
        "version": "6.0",
        "status": "affected",
        "lessThan": "6.*",
        "versionType": "semver"
      },
      {
        "version": "7.0",
        "status": "affected",
        "lessThan": "7.*",
        "versionType": "semver"
      },
      {
        "version": "8.0",
        "status": "affected",
        "lessThan": "8.*",
        "versionType": "semver"
      },
      {
        "version": "9.0",
        "status": "affected",
        "lessThan": "9.*",
        "versionType": "semver"
      },
      {
        "version": "10.0",
        "status": "affected",
        "lessThan": "10.*",
        "versionType": "semver"
      },
      {
        "version": "11.0",
        "status": "affected",
        "lessThan": "11.*",
        "versionType": "semver"
      },
      {
        "version": "12.0",
        "status": "affected",
        "lessThan": "12.*",
        "versionType": "semver"
      },
      {
        "version": "13.0",
        "status": "affected",
        "lessThan": "13.*",
        "versionType": "semver"
      },
      {
        "version": "14.0",
        "status": "affected",
        "lessThan": "14.*",
        "versionType": "semver"
      },
      {
        "version": "15.0",
        "status": "affected",
        "lessThan": "15.*",
        "versionType": "semver"
      },
      {
        "version": "16.0",
        "status": "affected",
        "lessThan": "16.*",
        "versionType": "semver"
      },
      {
        "version": "17.0",
        "status": "affected",
        "lessThan": "17.*",
        "versionType": "semver"
      },
      {
        "version": "18.0",
        "status": "affected",
        "lessThan": "18.*",
        "versionType": "semver"
      },
      {
        "version": "19.0",
        "status": "affected",
        "lessThan": "19.*",
        "versionType": "semver"
      }
    ]
  }
]