Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2023/06/25 6:54 p.m.52 views

Node.js: fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks.

A vulnerability was found in the fs.mkdtemp and fs.mkdtempSync functions in Node.js 20, which allowed malicious actors to bypass the permission model check and create arbitrary directories...

5.3CVSS7AI score0.01048EPSS
SaveExploits0
Rows per page
Query Builder