Lucene search
K

6 matches found

RedHat Linux
RedHat Linux
added 2026/04/13 3:0 a.m.4 views

nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix.

A flaw was found in Node.js. An incomplete security fix allows code operating under restricted file system write permissions to bypass these limitations. This vulnerability enables the modification of file permissions and ownership on already-open files, even when explicit write access is denied...

3.3CVSS6.2AI score0.00006EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2026/04/13 2:27 a.m.1 views

nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix.

A flaw was found in Node.js. An incomplete security fix allows code operating under restricted file system write permissions to bypass these limitations. This vulnerability enables the modification of file permissions and ownership on already-open files, even when explicit write access is denied...

3.3CVSS6.2AI score0.00006EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/03/31 10:11 p.m.1 views

CVE-2026-21716

A flaw was found in Node.js. An incomplete security fix allows code operating under restricted file system write permissions to bypass these limitations. This vulnerability enables the modification of file permissions and ownership on already-open files, even when explicit write access is denied...

3.8CVSS6.2AI score0.00006EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/03/30 7:7 p.m.0 views

CVE-2026-21716

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

3.3CVSS6.7AI score0.00006EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:39 p.m.6 views

CVE-2023-29478

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution...

9.8CVSS7.1AI score0.17181EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/04/07 12:0 a.m.3 views

PT-2023-22274 · Unknown · Bibliocraft

Name of the Vulnerable Software and Affected Versions: BiblioCraft versions prior to 2.4.6 Description: The issue allows restricted write access to almost anywhere on the filesystem due to a failure to sanitize path-traversal characters in filenames. This can include the Minecraft mods folder,...

9.8CVSS7.3AI score0.17181EPSS
Exploits1References4
Rows per page
Query Builder