CVE-2023-30584: Path Traversal
First published: Thu Dec 21 2023(Updated: )
A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of path traversal bypass when verifying file permissions. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Planning Analytics Cloud | <=2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-30584?
CVE-2023-30584 has been classified with a moderate severity due to its potential impact on file permission verification.
How do I fix CVE-2023-30584?
To address CVE-2023-30584, it is recommended to upgrade to a later version of Node.js that resolves the experimental permission model flaw.
What software is affected by CVE-2023-30584?
CVE-2023-30584 specifically affects Node.js version 20 and could impact applications dependent on this version.
What type of vulnerability is CVE-2023-30584?
CVE-2023-30584 is a path traversal vulnerability that occurs due to improper handling of file permissions.
Is the permission model in Node.js stable with CVE-2023-30584?
At the time of this CVE, the permission model in Node.js is experimental, which contributes to the vulnerability concerns.
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/weakness
- agent/references
- agent/description
- agent/author
- collector/nvd-api
- source/NVD
- agent/severity
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm planning analytics cloud
- version/ibm planning analytics cloud/2.0