Поиск уязвимостей
Количество 3
Количество 3
CVE-2017-16024
The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9. Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read access to the tmp directory, possibly allowing an attacker on the server to obtain confidential information from the buffer/tmp file, while it exists.
GHSA-38h8-x697-gh8q
Tmp files readable by other users in sync-exec
ALT-PU-2016-1086
ALT-PU-2016-1086: package `node` update to version 4.2.6-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-16024 The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9. Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read access to the tmp directory, possibly allowing an attacker on the server to obtain confidential information from the buffer/tmp file, while it exists. | CVSS3: 6.5 | 3% Низкий | больше 8 лет назад |
| GHSA-38h8-x697-gh8q Tmp files readable by other users in sync-exec | CVSS3: 6.5 | 3% Низкий | почти 8 лет назад |
| ALT-PU-2016-1086 ALT-PU-2016-1086: package `node` update to version 4.2.6-alt1 | CVSS3: 8.1 | больше 10 лет назад |
Уязвимостей на страницу