Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-39331
HistoryOct 18, 2023 - 4:15 a.m.

Path traversal

2023-10-1804:15:00
PRIOn knowledge base
www.prio-n.com
3
path traversal
vulnerability
node.js
cve-2023-30584
patch

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.2%

A previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit 205f1e6. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations.

Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.

CPENameOperatorVersion
node.jsge20.0.0
node.jslt20.8.0