Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-37372

Опубликовано: 09 янв. 2025
Источник: nvd
CVSS3: 3.6
EPSS Низкий

Описание

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

EPSS

Процентиль: 0%
0.00007
Низкий

3.6 Low

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 3.6
ubuntu
5 месяцев назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 3.6
redhat
5 месяцев назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 3.6
debian
5 месяцев назад

The Permission Model assumes that any path starting with two backslash ...

CVSS3: 3.6
github
5 месяцев назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 6.5
fstec
около 1 года назад

Уязвимость компонента Permission Model программной платформы Node.js, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 0%
0.00007
Низкий

3.6 Low

CVSS3

Дефекты

CWE-22