Design/Logic Flaw

2022-06-1213:15:00

PRIOn knowledge base

www.prio-n.com

deno

sandbox

symlink

vulnerability

access

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

17.8%

JSON

Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.

References

github.com/denoland/deno/issues/12152

hackers.report/report/614876917a7b150012836bb8