Node.js: Permissions policies can be bypassed via process.mainModule

🗓️ 24 Oct 2022 11:29:58Reported by goumsType

hackerone

hackerone🔗 hackerone.com👁 72 Views

Node.js: Vulnerability in Permissions Polic

Reporter	Title	Published	Views	Family All 209
ALT Linux	Security fix for the ALT Linux 10 package node version 16.19.1-alt1	22 Mar 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller is affected by vulnerabilities	15 Apr 202503:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® Graph	24 Apr 202322:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	1 Mar 202309:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in Node.js (CVE-2022-43548, CVE-2020-7676, CVE-2021-42550, CVE-2021-38561, CVE-2022-32149)	22 Jun 202320:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Node.js	28 Jun 202320:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to security restriction bypasss due to [CVE-2023-23918]	28 Apr 202311:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	20 Oct 202317:07	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Node.js	3 Apr 202315:27	–	ibm

19 Mar 2023 17:12Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

EPSS0.0002

node.js permissions policies bypass vulnerability sandbox escaping module whitelist