Node.js: Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
Discription

image
An incomplete fix has been identified for a vulnerability affecting Windows device names in the path.normalize() function in Node.js. The vulnerability allows path traversal protection to be bypassed on devices such as CON, PRN, and…Read More

Back to Main

Subscribe for the latest news: