CVE-2025-27210

🗓️ 18 Jul 2025 22:54:27Reported by MendType

Incomplete fix for CVE-2025-23084 in Node.js path.join API affecting Windows device names.

Reporter	Title	Published	Views	Family All 103
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') due to Node.js ( CVE-2025-27210 )	30 Sep 202515:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in NodeJS affect IBM Business Automation Workflow Configuration Editor	11 Sep 202511:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in nodejs affect IBM Business Automation Workflow Configuration Editor (nodejs January security release)	12 Mar 202518:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js (CVE-2025-23085, CVE-2025-23084 & CVE-2025-22150)	27 Feb 202516:08	–	ibm
IBM Security Bulletins	Security Bulletin: Improper Drive Name Handling in Node.js path.join on Windows, affect watsonx.data	15 Jan 202603:56	–	ibm
GithubExploit	Exploit for CVE-2025-27210	18 Jul 202511:57	–	githubexploit
GithubExploit	Exploit for CVE-2025-27210	16 Sep 202508:28	–	githubexploit
GithubExploit	Exploit for CVE-2025-27210	16 Jul 202505:33	–	githubexploit
AlpineLinux	CVE-2025-23084	28 Jan 202504:35	–	alpinelinux
BDU FSTEC	The vulnerability of the path.normalize() function in the Node.js software platform allows attackers to compromise the confidentiality and integrity of protected information.	4 Aug 202500:00	–	bdu_fstec