Lucene search

CVE-2023-32003

🗓️ 15 Aug 2023 16:10:15Reported by GoogleType

osv🔗 osv.dev👁 19 Views

fs.mkdtemp() and fs.mkdtempSync() path traversal bypas

Reporter	Title	Published	Views	Family All 59
Hacker One	Node.js: fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks.	25 Jun 202318:54	–	hackerone
Hacker One	Internet Bug Bounty: (CVE-2023-32003) fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks	9 Aug 202318:37	–	hackerone
Debian CVE	CVE-2023-32003	15 Aug 202316:15	–	debiancve
CVE	CVE-2023-32003	15 Aug 202316:15	–	cve
OSV	CGA-ff88-fh23-r4cw	6 Jun 202412:27	–	osv
OSV	CGA-7482-pcrv-6wxj	6 Jun 202412:24	–	osv
OSV	CGA-7c4q-5jwc-82vc	6 Jun 202412:23	–	osv
OSV	CGA-6ccj-2hv4-8jr7	6 Jun 202412:23	–	osv
OSV	BIT-node-min-2023-32003	16 Dec 202413:58	–	osv
OSV	BIT-node-2023-32003	6 Mar 202411:00	–	osv

Source	Link
security	www.security.netapp.com/advisory/ntap-20230915-0009/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX/
hackerone	www.hackerone.com/reports/2037887

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Aug 2023 16:15Current

7High risk

Vulners AI Score7

CVSS35.3

EPSS0.001

SSVC