Skip to content
OpenAdvisories

Vendor

log4js-node

1 known vulnerabilities.

Products

log4js-node 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2022-21704

    Incorrect Default Permissions in log4js-node

    log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable (in unix). This could cause problems if log files contain sensitive information. Th…

    log4js-node log4js-node node-log4js log4js Debian Ubuntu npm