Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-54798

Опубликовано: 07 авг. 2025
Источник: nvd
CVSS3: 2.5
EPSS Низкий

Описание

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

EPSS

Процентиль: 2%
0.00017
Низкий

2.5 Low

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 2.5
ubuntu
22 дня назад

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

CVSS3: 2.5
redhat
22 дня назад

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

CVSS3: 2.5
debian
22 дня назад

tmp is a temporary file and directory creator for node.js. In versions ...

CVSS3: 2.5
github
22 дня назад

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

EPSS

Процентиль: 2%
0.00017
Низкий

2.5 Low

CVSS3

Дефекты

CWE-59