Node.js-CVE-2024-39943

Node.js HFS Befehlsausführungsschwachstelle CVE-2024-39943 WhiteHat School 3. Generation – Jeongmin Roh @JenmrR Zusammenfassung In einer Node.js-basierten HFS-Serverumgebung existiert eine Schwachstelle, bei der der Inhalt hochgeladener Dateien mit childprocess.execSync ausgeführt wird. Ein...

CVE-2024-39943

rejetto HFS aka HTTP File Server 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users if they have Upload permissions. This occurs because a shell is used to execute df i.e., with execSync instead of spawnSync in childprocess in Node.js...

CVE-2024-39943

rejetto HFS aka HTTP File Server 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users if they have Upload permissions. This occurs because a shell is used to execute df i.e., with execSync instead of spawnSync in childprocess in Node.js...