1 matches found
nodejs: path traversal through path stored in Uint8Array
Various node:fs functions allow specifying paths as either strings or Uint8Array objects. In Node.js environments, the Buffer class extends the Uint8Array class. Node.js prevents path traversal through strings see CVE-2023-30584 and Buffer objects see CVE-2023-32004, but not through non-Buffer...
9.8CVSS7.2AI score0.01819EPSS
SaveExploits0References4
20