Lucene search

K
osvGoogleOSV:CVE-2017-14849
HistorySep 28, 2017 - 1:29 a.m.

CVE-2017-14849

2017-09-2801:29:02
Google
osv.dev
5

AI Score

6.8

Confidence

Low

EPSS

0.956

Percentile

99.5%

Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to “…” handling was incompatible with the pathname validation used by unspecified community modules.

AI Score

6.8

Confidence

Low

EPSS

0.956

Percentile

99.5%