Node.js Multiple Vulnerabilities
Release Date: 20 Feb 2023
RISK: Medium Risk
TYPE: Servers - Other Servers
Multiple vulnerabilities have been identified in Node.js, a remote attacker can exploit these vulnerabilities to trigger remote code execution, security restriction bypass, elevation of privilege and denial of service on the targeted system.
Impact
- Remote Code Execution
- Security Restriction Bypass
- Denial of Service
- Elevation of Privilege
System / Technologies affected
- Node.js versions prior to 14.21.3 (LTS)
- Node.js versions prior to 16.19.1 (LTS)
- Node.js versions prior to 18.14.1 (LTS)
- Node.js versions prior to 19.6.1
Solutions
Before installation of the software, please visit the vendor web-site for more details.
- Update to Node.js version 14.21.3 (LTS)
- Update to Node.js version 16.19.1 (LTS)
- Update to Node.js version 18.14.1 (LTS)
- Update to Node.js version 19.6.1
Vulnerability Identifier
Source
Related Link
https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/
沒有留言:
發佈留言