Debian Node-Log4Js vulnerabilities

1 known vulnerability affecting debian/node-log4js.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-21704MEDIUMCVSS 5.5fixed in node-log4js 6.4.1+~cs8.3.5-1 (bookworm)2022

CVE-2022-21704 [MEDIUM] CVE-2022-21704: node-log4js - log4js-node is a port of log4js to node.js. In affected versions default file pe... log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable (in unix). This could cause problems if log files contain sensitive information. This would affect any users that have not supplied their own permissions for the files via the mode param