CVE-2024-27931

Summary

CVE-2024-27931 is a vulnerability affecting Deno, a JavaScript, TypeScript, and WebAssembly runtime. The issue lies in the insufficient validation of parameters in `Deno.makeTemp*` APIs, which can allow users to create files outside of authorized directories. This potentially harmful action may result in overwriting critical files on the system, potentially impacting other systems. A user can manipulate the prefix or suffix of a `Deno.makeTemp*` API by including path traversal characters. Deno has released version 1.41.1 to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.