Описание
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-apps/xenial | not-affected | |
| esm-infra-legacy/trusty | not-affected | |
| precise/esm | DNE | |
| trusty | not-affected | |
| trusty/esm | not-affected | |
| upstream | released | 8.6.0 |
| vivid/ubuntu-core | DNE | |
| xenial | not-affected | |
| zesty | not-affected |
Показывать по
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintende ...
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.
5 Medium
CVSS2
7.5 High
CVSS3