UnratedFix available
Path Validation Vulnerability, September 2017
Node.js 8.5.0 was vulnerable to a path validation issue that could let an attacker access unintended file system paths. The issue was resolved in a new Node.js 8.x release by partially reverting a change.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
The Node.js project released a new version of 8.x this week which incorporates a security fix.
Node.js
Version 8.5.0 of Node.js is vulnerable.
- Affected versions
- 8.5.0
Version 8.5.0 of Node.js is vulnerable.
- Fixed versions
- 8.x
The Node.js project released a new version of 8.x this week which incorporates a security fix.
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2017-14849
A CVE has been assigned as CVE-2017-14849
Publisher severity
No explicit severity was extracted.
- Event
- #57679 · Revision 1
- Added to Heist Feed
- Publisher date