mickmick.net

Node.js Remote Code Execution Vulnerability

Release Date: 11 Apr 2024

RISK: Medium Risk

TYPE: Servers - Other Servers

A vulnerability has been identified in Node.js. A remote  attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

---

Impact

• Remote Code Execution

---

System / Technologies affected

• Node.js versions prior to 18.20.2 (LTS)
• Node.js versions prior to 20.12.2 (LTS)
• Node.js versions prior to 21.7.3 (Current)

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Update to Node.js version 18.20.2 (LTS)
• Update to Node.js version 20.12.2 (LTS)
• Update to Node.js version 21.7.3 (Current)

 

---

Vulnerability Identifier

• CVE-2024-27980

---

Source

• nodejs

---

Related Link

• https://nodejs.org/en/blog/release/v18.20.2
• https://nodejs.org/en/blog/release/v20.12.2
• https://nodejs.org/en/blog/release/v21.7.3