Lucene search
+L

1 matches found

OSV
OSV
added 2024/02/20 2:15 a.m.14 views

AZL-35046 CVE-2024-21891 affecting package nodejs for versions less than 20.14.0-1

Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to filesystem permission model bypass through path traversal attack. This vulnerability affects all users using the experiment...

8.8CVSS6.7AI score0.01245EPSS
SaveExploits0References1
Rows per page
Query Builder