Lucene search
GitHub Advisory DatabaseGHSA-3MRP-QHCJ-MWV5HistoryMay 24, 2022 - 5:02 p.m.
Duplicate Advisory: Node CLI Allows Arbitrary File Overwrite
2022-05-2417:02:32
CWE-22
GitHub Advisory Database
github.com
7
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-6cpc-mj5c-m9rq. This link is maintained to preserve external references.
Original Description
An issue exists in node-cli 0.1.0 through 0.11.3 due to predictable temporary file names in lock_file and log_file, which allows an attacker to overwrite files.
Affected configurations
Node
cli_projectcliRange≤0.11.3node.js
Related
cvelist
cvelist
CVE-2016-1000021
2019-12-03 21:56:20
cve
cve
CVE-2016-1000021
2019-12-03 22:15:13
nvd
nvd
CVE-2016-1000021
2019-12-03 22:15:13
prion
prion
Design/Logic Flaw
2019-12-03 22:15:00