Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44537
HistoryNov 30, 2023 - 9:30 p.m.

Path Traversal

2023-11-3021:30:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
path traversal
vulnerable
node.js
security
implementation
unauthorized access
sensitive files
privilege escalation

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.1%

nodejs-current is vulnerable to Path Traversal. The vulnerability occurs due to the implementation not adequately protecting itself against applications overwriting built-in utility functions with user-defined implementations resulting in malicious attackers to gain unauthorized access to sensitive files or escalate their privileges.