Lucene search
+L

3 matches found

Hacker One
Hacker One
added 2023/08/09 6:37 p.m.48 views

Internet Bug Bounty: (CVE-2023-32003) fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks

The fs.mkdtemp and fs.mkdtempSync functions in Node.js were found to be missing getValidatedPath checks, allowing for a path traversal attack. This vulnerability could be exploited to create arbitrary directories...

5.3CVSS7.1AI score0.01048EPSS
SaveExploits0
Rows per page
Query Builder