Lucene search
Haxatron1H1:2038134HistoryJun 26, 2023 - 6:45 a.m.
Node.js: Permission model bypass by specifying a path traversal sequence in a buffer,
2023-06-2606:45:26
haxatron1
hackerone.com
33
node.js
vulnerability
experimental
permission model
buffer
file system
traversal
path
bypass
cve
bug bounty
0.001 Low
EPSS
Percentile
28.6%
A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions.
This vulnerability affects all users using the experimental permission model in Node.js 20.
Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.
Related
redhatcve
redhatcve
CVE-2023-32004
2023-08-10 10:19:15
CVE-2023-39332
2023-10-16 16:49:58
ubuntucve
ubuntucve
CVE-2023-32004
2023-08-15 00:00:00
CVE-2023-39332
2023-10-18 00:00:00
cgr
cgr
CVE-2023-32004 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2023-32004 vulnerabilities
2024-06-25 03:08:26
hackerone
hackerone
osv
osv
BIT-node-2023-32004
2024-03-06 11:00:15
CVE-2023-32004
2023-08-15 16:15:11
BIT-node-2023-39332
2024-03-06 10:59:07
cvelist
cvelist
CVE-2023-32004
2023-08-15 15:10:19
CVE-2023-39332
2023-10-18 03:55:18
prion
prion
Path traversal
2023-08-15 16:15:00
Path traversal
2023-10-18 04:15:00
debiancve
debiancve
CVE-2023-32004
2023-08-15 16:15:11
CVE-2023-39332
2023-10-18 04:15:11
cve
cve
CVE-2023-32004
2023-08-15 16:15:11
CVE-2023-39332
2023-10-18 04:15:11
alpinelinux
alpinelinux
CVE-2023-32004
2023-08-15 16:15:11
CVE-2023-39332
2023-10-18 04:15:11
nvd
nvd
CVE-2023-32004
2023-08-15 16:15:11
CVE-2023-39332
2023-10-18 04:15:11
openvas
openvas
Node.js 20.x < 20.5.1 Multiple Vulnerabilities - Mac OS X
2023-08-10 00:00:00
Node.js 20.x < 20.5.1 Multiple Vulnerabilities - Windows
2023-08-10 00:00:00
Fedora: Security Advisory for nodejs20 (FEDORA-2023-18476abd7e)
2023-08-19 00:00:00
f5
f5
K000137330 : Node.JS vulnerabilities CVE-2023-38552, CVE-2023-39331, CVE-2023-39332, and CVE-2023-3933
2023-10-24 00:00:00
K000135997 : Multiple Node.js vulnerabilities
2023-08-28 00:00:00
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : nodejs18 (SUSE-SU-2023:3378-1)
2023-08-23 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: nodejs16-16.20.2-1.fc37
2023-08-19 00:48:28
[SECURITY] Fedora 37 Update: nodejs20-20.5.1-1.fc37
2023-08-19 00:48:29
[SECURITY] Fedora 37 Update: nodejs18-18.17.1-1.fc37
2023-08-19 00:48:28
ibm
ibm
gentoo
gentoo
Node.js: Multiple Vulnerabilities
2024-05-08 00:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00