Lucene search

PRIOn knowledge basePRION:CVE-2024-27931

HistoryMar 05, 2024 - 5:15 p.m.

Path traversal

2024-03-0517:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

javascript

typescript

webassembly

insufficient validation

file creation

overwrite

system impact

fixed vulnerability

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Insufficient validation of parameters in Deno.makeTemp* APIs would allow for creation of files outside of the allowed directories. This may allow the user to overwrite important files on the system that may affect other systems. A user may provide a prefix or suffix to a Deno.makeTemp* API containing path traversal characters. This is fixed in Deno 1.41.1.

References

github.com/denoland/deno/security/advisories/GHSA-hrqr-jv8w-v9jh