Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:44536
HistoryNov 30, 2023 - 9:30 p.m.

Path Traversal

2023-11-3021:30:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
path traversal
node.js
uint8array
software

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.5%

JSON

nodejs-current is vulnerable to Path Traversal. The vulnerability is due to there is no proper neutralization for special elements within the pathname that specifically within the handling of file system paths by various node:fs functions. This vulnerability is the result of the way Node.js handles paths specified as Uint8Array objects.

Related

cgr 1
wolfi 1
redhatcve 1
prion 1
cve 1
alpinelinux 1
hackerone 3
osv 5
nvd 1
ubuntucve 1
cvelist 1
debiancve 1
ibm 6
photon 1
oraclelinux 1
openvas 5
fedora 3
nessus 7
almalinux 1
redhat 1
rocky 1
f5 1
cgr
cgr
CVE-2023-39332 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2023-39332 vulnerabilities
2024-06-25 03:08:26
redhatcve
redhatcve
CVE-2023-39332
2023-10-16 16:49:58
prion
prion
Path traversal
2023-10-18 04:15:00
cve
cve
CVE-2023-39332
2023-10-18 04:15:11
alpinelinux
alpinelinux
CVE-2023-39332
2023-10-18 04:15:11
hackerone
hackerone
Node.js: Path traversal through path stored in Uint8Array
2023-10-10 12:45:46
Internet Bug Bounty: Path traversal through path stored in Uint8Array in Node.js 20
2023-11-17 17:45:17
Internet Bug Bounty: Path traversal by monkey-patching Buffer internals
2024-03-26 14:50:28
osv
osv
BIT-node-2023-39332
2024-03-06 10:59:07
CVE-2023-39332
2023-10-18 04:15:11
BIT-2023-39332
2023-10-26 06:23:05
nvd
nvd
CVE-2023-39332
2023-10-18 04:15:11
ubuntucve
ubuntucve
CVE-2023-39332
2023-10-18 00:00:00
cvelist
cvelist
CVE-2023-39332
2023-10-18 03:55:18
debiancve
debiancve
CVE-2023-39332
2023-10-18 04:15:11
ibm
ibm
Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.14 and earlier
2024-01-19 18:15:17
Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor
2024-01-17 07:30:23
Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node.js
2023-12-11 10:00:07
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0132
2023-11-01 00:00:00
oraclelinux
oraclelinux
nodejs:20 security update
2023-11-22 00:00:00
openvas
openvas
Fedora: Security Advisory for nodejs20 (FEDORA-2023-4d2fd884ea)
2023-10-28 00:00:00
Fedora: Security Advisory for nodejs20 (FEDORA-2023-f66fc0f62a)
2023-10-28 00:00:00
Fedora: Security Advisory for nodejs20 (FEDORA-2023-7b52921cae)
2023-11-05 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: nodejs20-20.8.1-1.fc37
2023-10-26 01:35:05
[SECURITY] Fedora 39 Update: nodejs20-20.8.1-1.fc39
2023-11-03 18:59:18
[SECURITY] Fedora 38 Update: nodejs20-20.8.1-1.fc38
2023-10-26 01:51:49
nessus
nessus
RHEL 8 : nodejs:20 (RHSA-2023:7205)
2023-11-14 00:00:00
Node.js 18.x < 18.18.2 / 20.x < 20.8.1 Multiple Vulnerabilities (Friday October 13 2023 Security Releases).
2023-10-19 00:00:00
Fedora 37 : nodejs20 (2023-f66fc0f62a)
2023-10-26 00:00:00
almalinux
almalinux
Important: nodejs:20 security update
2023-11-14 00:00:00
redhat
redhat
(RHSA-2023:7205) Important: nodejs:20 security update
2023-11-14 16:23:42
rocky
rocky
nodejs:20 security update
2023-11-28 22:43:02
f5
f5
K000137330 : Node.JS vulnerabilities CVE-2023-38552, CVE-2023-39331, CVE-2023-39332, and CVE-2023-3933
2023-10-24 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.5%

JSON
Related for VERACODE:44536
cgr1wolfi1redhatcve1prion1cve1alpinelinux1hackerone3osv5nvd1ubuntucve1cvelist1debiancve1ibm6photon1oraclelinux1openvas5fedora3nessus7almalinux1redhat1rocky1f51