Lucene search

K
osvGoogleOSV:BIT-2023-39331
HistoryOct 26, 2023 - 6:23 a.m.

BIT-2023-39331

2023-10-2606:23:13
Google
osv.dev
12
patch insufficiency
path traversal vulnerability
cve-2023-30584
node.js software
experimental feature

0.001 Low

EPSS

Percentile

22.2%

A previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit 205f1e6. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations.Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.

CPENameOperatorVersion
nodelt20.8.0