CVE-2023-30584

7.7 highEPSS 0.3%

High (7.7). EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of path traversal bypass when verifying file permissions. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.

Severity

CVSS 3.1

7.7 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2024-09-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
https://security.netapp.com/advisory/ntap-20241108-0005/

Check your stack JSON