Lucene search
PRIOn knowledge basePRION:CVE-2023-32004HistoryAug 15, 2023 - 4:15 p.m.
Path traversal
2023-08-1516:15:00
PRIOn knowledge base
www.prio-n.com
10
path traversal
vulnerability
node.js 20
experimental permission model
buffer handling
file system apis
file permissions bypass
A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions.
This vulnerability affects all users using the experimental permission model in Node.js 20.
Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.
Related
redhatcve
redhatcve
CVE-2023-32004
2023-08-10 10:19:15
CVE-2023-39332
2023-10-16 16:49:58
cgr
cgr
CVE-2023-32004 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2023-32004
2023-08-15 00:00:00
CVE-2023-39332
2023-10-18 00:00:00
wolfi
wolfi
CVE-2023-32004 vulnerabilities
2024-07-05 21:08:40
osv
osv
BIT-node-2023-32004
2024-03-06 11:00:15
CVE-2023-32004
2023-08-15 16:15:11
BIT-node-2023-39332
2024-03-06 10:59:07
cvelist
cvelist
CVE-2023-32004
2023-08-15 15:10:19
CVE-2023-39332
2023-10-18 03:55:18
debiancve
debiancve
CVE-2023-32004
2023-08-15 16:15:11
CVE-2023-39332
2023-10-18 04:15:11
hackerone
hackerone
Internet Bug Bounty: (CVE-2023-32004) Permission model bypass by specifying a path traversal sequence in a Buffer
2023-08-09 18:31:37
Node.js: Permission model bypass by specifying a path traversal sequence in a buffer,
2023-06-26 06:45:26
Node.js: Path traversal through path stored in Uint8Array
2023-10-10 12:45:46
cve
cve
CVE-2023-32004
2023-08-15 16:15:11
CVE-2023-39332
2023-10-18 04:15:11
nvd
nvd
CVE-2023-32004
2023-08-15 16:15:11
CVE-2023-39332
2023-10-18 04:15:11
alpinelinux
alpinelinux
CVE-2023-32004
2023-08-15 16:15:11
CVE-2023-39332
2023-10-18 04:15:11
prion
prion
Path traversal
2023-10-18 04:15:00
openvas
openvas
Node.js 20.x < 20.5.1 Multiple Vulnerabilities - Windows
2023-08-10 00:00:00
Node.js 20.x < 20.5.1 Multiple Vulnerabilities - Mac OS X
2023-08-10 00:00:00
Fedora: Security Advisory for nodejs20 (FEDORA-2023-18476abd7e)
2023-08-19 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: nodejs20-20.5.1-1.fc37
2023-08-19 00:48:29
[SECURITY] Fedora 37 Update: nodejs16-16.20.2-1.fc37
2023-08-19 00:48:28
[SECURITY] Fedora 38 Update: nodejs20-20.5.1-1.fc38
2023-08-16 01:22:31
nessus
nessus
SUSE SLES12 Security Update : nodejs18 (SUSE-SU-2023:3356-1)
2023-08-19 00:00:00
Fedora 37 : nodejs16 / nodejs18 / nodejs20 (2023-18476abd7e)
2023-08-19 00:00:00
ibm
ibm
f5
f5
K000137330 : Node.JS vulnerabilities CVE-2023-38552, CVE-2023-39331, CVE-2023-39332, and CVE-2023-3933
2023-10-24 00:00:00
K000135997 : Multiple Node.js vulnerabilities
2023-08-28 00:00:00
nodejsblog
nodejsblog
Wednesday August 9th 2023 Security Releases
2023-08-09 00:00:00
Friday October 13 2023 Security Releases
2023-10-13 00:00:00
gentoo
gentoo
Node.js: Multiple Vulnerabilities
2024-05-08 00:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00