An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-libsUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-devel | Apr 21, 2023 | Feb 23, 2023 |
| Alpine Linux | — | Upgrade nodejs | Mar 26, 2024 | Feb 23, 2023 |
| Amazon_linux_2023 | — | Upgrade v8-develUpgrade nodejsUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-libsUpgrade nodejs-libs-debuginfoUpgrade nodejs-docs | Feb 17, 2025 | Feb 16, 2023 |
| Centos_linux | — | Upgrade nodejs-libs-debuginfoUpgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-libsUpgrade npm | Apr 10, 2023 | Feb 23, 2023 |
| Debian | — | Upgrade nodejs | Feb 27, 2023 | Feb 23, 2023 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-libsUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-full-i18n | Apr 5, 2023 | Feb 16, 2023 |
| Redhat_linux | — | Upgrade nodejs-packagingUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-libsUpgrade nodejs-libs-debuginfoUpgrade nodejs-nodemon | Apr 3, 2023 | Feb 23, 2023 |
| Rocky_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-libs-debuginfo | Mar 5, 2024 | Feb 23, 2023 |
| Suse | — | Upgrade nodejs12-develUpgrade nodejs14-docsUpgrade nodejs16-develUpgrade npm18Upgrade nodejs16Upgrade nodejs18-docsUpgrade corepack16Upgrade nodejs10Upgrade nodejs12Upgrade nodejs10-docsUpgrade nodejs18Upgrade npm12Upgrade nodejs12-docsUpgrade nodejs14Upgrade nodejs14-develUpgrade npm10Upgrade nodejs16-docsUpgrade nodejs10-develUpgrade corepack18Upgrade corepack14Upgrade nodejs18-develUpgrade npm14Upgrade npm16 | Mar 6, 2023 | Feb 23, 2023 |
| Ubuntu | — | Upgrade libnode64Upgrade libnode108Upgrade nodejsUpgrade libnode72 | Mar 5, 2024 | Feb 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub