Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-54798

Опубликовано: 07 авг. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 2.5

Описание

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

РелизСтатусПримечание
devel

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

jammy

needs-triage

noble

needs-triage

plucky

needs-triage

upstream

needs-triage

Показывать по

EPSS

Процентиль: 3%
0.00017
Низкий

2.5 Low

CVSS3

Связанные уязвимости

CVSS3: 2.5
redhat
21 день назад

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

CVSS3: 2.5
nvd
21 день назад

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

CVSS3: 2.5
debian
21 день назад

tmp is a temporary file and directory creator for node.js. In versions ...

CVSS3: 2.5
github
22 дня назад

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

EPSS

Процентиль: 3%
0.00017
Низкий

2.5 Low

CVSS3