CVE-2024-22018P4LOWCVSS 2.9≥ 4.0, < 4.*·≥ 5.0, < 5.*+16 more2024-07-10
CVE-2024-22018 [LOW] CVE-2024-22018: A vulnerability has been identified in Node.js, affecting users of the experimental permission model
A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used.
This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to.
Th
nvd