Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7975-2qr9-g542

Опубликовано: 09 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.6

Описание

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

EPSS

Процентиль: 0%
0.00007
Низкий

3.6 Low

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 3.6
ubuntu
5 месяцев назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 3.6
redhat
5 месяцев назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 3.6
nvd
5 месяцев назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 3.6
debian
5 месяцев назад

The Permission Model assumes that any path starting with two backslash ...

CVSS3: 6.5
fstec
около 1 года назад

Уязвимость компонента Permission Model программной платформы Node.js, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 0%
0.00007
Низкий

3.6 Low

CVSS3

Дефекты

CWE-22