Node.js: Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
Discription

An incomplete fix has been identified for a vulnerability affecting Windows device names in the path.normalize() function in Node.js. The vulnerability allows path traversal protection to be bypassed on devices such as CON, PRN, and…Read More
References
Back to Main