Internet Bug Bounty: Path traversal through path stored in Uint8Array in Node.js 20

🗓️ 17 Nov 2023 17:45:17Reported by tniessenType

Internet Bug Bounty: Path traversal through path stored in Uint8Array in Node.js 20. Various `node:fs` functions allow specifying paths as strings or `Uint8Array` objects. Node.js prevents path traversal through strings and `Buffer` objects but not through non-`Buffer` `Uint8Array` objects

Reporter	Title	Published	Views	Family All 77
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.14 and earlier	19 Jan 202418:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	17 Jan 202407:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities	15 Apr 202502:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	6 Dec 202316:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local - Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	7 May 202419:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node.js	11 Dec 202309:42	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0247: nodejs:20 (ALINUX3-SA-2024:0247)	14 May 202500:00	–	nessus
Tenable Nessus	Fedora 38 : nodejs20 (2023-4d2fd884ea)	26 Oct 202300:00	–	nessus
Tenable Nessus	Fedora 39 : nodejs20 (2023-7b52921cae)	7 Nov 202300:00	–	nessus
Tenable Nessus	Fedora 37 : nodejs20 (2023-f66fc0f62a)	26 Oct 202300:00	–	nessus

20 Jan 2024 16:26Current

8.5High risk

Vulners AI Score8.5

CVSS 3.19.8

EPSS0.00521

SSVC