Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c5w2-4jcq-rvf5

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.

Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.

EPSS

Процентиль: 99%
0.87871
Высокий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 8 лет назад

Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.

CVSS3: 7.5
nvd
почти 8 лет назад

Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.

CVSS3: 7.5
debian
почти 8 лет назад

Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintende ...

suse-cvrf
больше 5 лет назад

Security update for Mozilla Firefox

EPSS

Процентиль: 99%
0.87871
Высокий

7.5 High

CVSS3

Дефекты

CWE-22