Skip to content
OpenAdvisories

Product · HackerOne

sync-exec node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2017-16024

    Tmp files readable by other users in sync-exec

    The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9. Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read access to the tmp directory, possibly allowing an attacker on the…

    HackerOne sync-exec node module sync-exec npm