Node.js: Permission model bypass by specifying a path traversal sequence in a buffer,

🗓️ 26 Jun 2023 06:45:26Reported by haxatron1Type

hackerone

hackerone🔗 hackerone.com👁 56 Views

Node.js vulnerability in experimental permission mode

Reporter	Title	Published	Views	Family All 80
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.0.1	16 Nov 202315:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple Node.js vulnerabilities	31 Jan 202413:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	26 Sep 202308:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node.js	29 Apr 202502:31	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.11 addresses multiple security vulnerabilities.	20 Dec 202316:10	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to bypassing security restrictions due to multiple Node.js vulnerabilities	14 Sep 202317:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Voice Gateway	2 Oct 202320:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.13 and earlier	12 Oct 202319:11	–	ibm
AlpineLinux	CVE-2023-32004	15 Aug 202316:15	–	alpinelinux
Chainguard	CVE-2023-32004 vulnerabilities	15 Aug 202316:15	–	cgr

11 Aug 2023 16:38Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

EPSS0.00118

SSVC

node.js vulnerability experimental permission model buffer file system traversal path bypass cve bug bounty