CVE-2025-27210_NodeJS_Path_Traversal_Exploit

CVE-2025-27210NodeJSPathTraversalExploiter Proof of Concept CVE-2025-27210，一种精确的路径遍历漏洞，影响在 Microsoft Windows 上运行的 Node.js 应用程序。该漏洞利用了 Windows 处理保留设备文件名（例如 AUX、CON、NUL）时的特定方式，结合路径中的目录遍历序列（../），这些路径由 path.join 或 path.normalize 等函数处理。 python CVE-2025-27210NodeJSPathTraversalExploiter.py -t...

Node.js: Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()

An incomplete fix has been identified for a vulnerability affecting Windows device names in the path.normalize function in Node.js. The vulnerability allows path traversal protection to be bypassed on devices such as CON, PRN, and AUX...