CVE-2021-41641

Опубликовано: 12 июн. 2022

Источник: nvd

CVSS3: 8.4

CVSS2: 3.6

EPSS Низкий

Описание

Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.

Ссылки

https://github.com/denoland/deno/issues/12152
Exploit
Issue Tracking
Third Party Advisory
https://hackers.report/report/614876917a7b150012836bb8
Exploit
Third Party Advisory
https://github.com/denoland/deno/issues/12152
Exploit
Issue Tracking
Third Party Advisory
https://hackers.report/report/614876917a7b150012836bb8
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*

Версия от 1.10.3 (включая) до 1.14.0 (включая)

EPSS

Процентиль: 33%

0.00128

Низкий

8.4 High

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

GHSA-67hm-27mx-9cg7