Node.js Multiple Vulnerabilities
Release Date:
21 Jun 2023
4323
Views
RISK: Medium Risk
TYPE: Servers - Other Servers
Multiple vulnerabilities have been identified in Node.js. A remote attacker can exploit these vulnerabilities to trigger security restriction bypass, elevation of privilege and denial of service on the targeted system.
Impact
- Security Restriction Bypass
- Denial of Service
- Elevation of Privilege
System / Technologies affected
- Node.js versions prior to 16.20.1 (LTS)
- Node.js versions prior to 18.16.1 (LTS)
- Node.js versions prior to 20.3.1
Solutions
Before installation of the software, please visit the vendor web-site for more details.
- Update to Node.js version 16.20.1 (LTS)
- Update to Node.js version 18.16.1 (LTS)
- Update to Node.js version 20.3.1
Vulnerability Identifier
- CVE-2023-30581
- CVE-2023-30582
- CVE-2023-30583
- CVE-2023-30584
- CVE-2023-30585
- CVE-2023-30586
- CVE-2023-30587
- CVE-2023-30588
- CVE-2023-30589
- CVE-2023-30590
Source
Related Link
https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/
Share with