Lucene search
+L

2 matches found

BDU FSTEC
BDU FSTEC
added 2023/08/28 12:0 a.m.15 views

The vulnerability of the fs.openAsBlob() method in the Node.js software platform allows attackers to compromise the integrity of protected information.

The vulnerability of the fs.openAsBlob method in the Node.js programming platform is related to errors in using the --allow-fs-read flag for file system access. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

5.3CVSS6.6AI score0.00722EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/06/22 2:38 a.m.7 views

SUSE CVE-2023-30583

fs.openAsBlob can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob API. Please note that at the time this CVE was issued, the permission model is an...

7.5CVSS9AI score0.00722EPSS
SaveExploits0References3
Rows per page
Query Builder