CERT-In Warns Users of Multiple Bugs in Node.js Platform Which Can Allow Attacker To Compromise Targeted System
The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, on Thursday, warned users of multiple vulnerabilities in Node.js, which could allow an attacker to compromise the targeted system.
New Delhi, July 11: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, on Thursday, warned users of multiple vulnerabilities in Node.js, which could allow an attacker to compromise the targeted system.
The affected software includes Node.js versions prior to 18.20.4 (LTS), 20.15.1 (LTS), and 22.4.1 (Current). "Multiple vulnerabilities have been reported in Node.js which could be exploited by an attacker to obtain sensitive information, bypass security restrictions and execute arbitrary code on the targeted system," said the CERT-In advisory.슬롯 머신 사이트 추천Apple Threat Notification: Tech Giant Issues Warning About Mercenary Spyware Attack Like 슬롯사이트˜Pegasus슬롯사이트� to iPhone Users in 98 Countries Including India.
According to the cyber agency, these vulnerabilities exist in Node.js due to an inadequate permission model that fails to restrict file stats "through the fs.lstat API, embedding of non-network imports in data URLs, improper handling of batch files in child_process.spawn/child_process.spawnSync, an error when the --allow-fs-write flag is used and improper processing of UNC paths by the Permission Model".슬롯 머신 사이트 추천AI Chatbot Dangers: Amazon슬롯사이트™s Alexa, Snapchats슬롯사이트™s My AI, Microsoft슬롯사이트™s Bing Show Signs of 슬롯사이트˜Empathy Gaps슬롯사이트�, May Bring Harm to Children, Says Study.
Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information, bypass security restrictions and execute arbitrary code on the targeted system, the agency mentioned. CERT-In advised users to apply appropriate security updates as mentioned by the company.
(The above story first appeared on LatestLY on Jul 11, 2024 07:37 PM IST. For more news and updates on politics, world, sports, entertainment and lifestyle, log on to our website latestly.com).