Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-54798

Опубликовано: 07 авг. 2025
Источник: ubuntu
Приоритет: medium
CVSS3: 2.5

Описание

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

РелизСтатусПримечание
devel

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

jammy

needs-triage

noble

needs-triage

plucky

ignored

end of life, was needs-triage
questing

needs-triage

Показывать по

2.5 Low

CVSS3

Связанные уязвимости

CVSS3: 2.5
redhat
6 месяцев назад

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

CVSS3: 2.5
nvd
6 месяцев назад

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

CVSS3: 2.5
debian
6 месяцев назад

tmp is a temporary file and directory creator for node.js. In versions ...

CVSS3: 2.5
github
6 месяцев назад

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

2.5 Low

CVSS3