Security Advisory

CVE-2020-12265

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-04-26 16:46:21

Last updated 2024-08-04 11:48:58

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal.

← Browse all CVEs View on cve.org ↗