Lucene search
Redhat.comRH:CVE-2023-30583HistoryJul 05, 2023 - 3:17 p.m.
CVE-2023-30583
2023-07-0515:17:53
redhat.com
access.redhat.com
8
cve-2023-30583
node.js
fs.openasblob()
experimental permission model
missing check
0 Low
EPSS
Percentile
0.0%
A vulnerability has been identified in Node.js version 20, where fs.openAsBlob() can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob() API.
Related
ubuntucve
ubuntucve
CVE-2023-30583
2023-06-21 00:00:00
hackerone
hackerone
Node.js: fs.openAsBlob() bypasses permission system
2023-04-29 22:18:42
cve
cve
CVE-2023-30583
2023-06-21 04:12:41
wolfi
wolfi
CVE-2023-30583 vulnerabilities
2024-06-27 09:08:32
cgr
cgr
CVE-2023-30583 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2023-30583
2023-06-21 04:12:41
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0226)
2023-07-10 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerability
2023-07-07 08:54:45
ibm
ibm
nessus
nessus
Node.js 16.x < 16.20.1 / 18.x < 18.16.1 / 20.x < 20.3.1 Multiple Vulnerabilities (Tuesday June 20 2023 Security Releases).
2023-06-22 00:00:00
GLSA-202405-29 : Node.js: Multiple Vulnerabilities
2024-05-08 00:00:00
Siemens SINEC NMS < V2.0 SP1 Multiple Vulnerabilities
2024-02-29 00:00:00
gentoo
gentoo
Node.js: Multiple Vulnerabilities
2024-05-08 00:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00