← Back to CVE List

CVE-2023-32558

Published: 2023-09-12T02:15Z
Last Modified: 2024-11-21T08:03Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The use of the deprecated API `process.binding()` can bypass the permission model through path traversal. This vulnerability affects all users using the experimental permission model in Node.js 20.x. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt