CVE-2023-32558

Summary

CVE-2023-32558 is a vulnerability affecting Node.js 20.x that allows bypassing the permission model through path traversal using the deprecated API `process.binding()`. This issue only impacts users working with the experimental permission model in Node.js. At the time this CVE was disclosed, the permission model was not a standard feature in Node.js.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.