mickmick.net

Node.js Multiple Vulnerabilities

Release Date: 21 Jun 2023

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities have been identified in Node.js. A remote attacker can exploit these vulnerabilities to trigger security restriction bypass, elevation of privilege and denial of service on the targeted system.

---

Impact

• Security Restriction Bypass
• Denial of Service
• Elevation of Privilege

---

System / Technologies affected

• Node.js versions prior to 16.20.1 (LTS)
• Node.js versions prior to 18.16.1 (LTS)
• Node.js versions prior to 20.3.1

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Update to Node.js version 16.20.1 (LTS)
• Update to Node.js version 18.16.1 (LTS)
• Update to Node.js version 20.3.1

---

Vulnerability Identifier

• CVE-2023-30581
• CVE-2023-30582
• CVE-2023-30583
• CVE-2023-30584
• CVE-2023-30585
• CVE-2023-30586
• CVE-2023-30587
• CVE-2023-30588
• CVE-2023-30589
• CVE-2023-30590

---

Source

• nodejs

---

Related Link

https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/