CVE-2024-27931

Summary

CVE-2024-27931 is a vulnerability affecting Deno, a JavaScript, TypeScript, and WebAssembly runtime. The issue lies in the insufficient validation of parameters in Deno's `Deno.makeTemp*` APIs. An attacker could potentially create files outside of the designated directories by providing a path containing path traversal characters. This may result in the overwriting of important system files, potentially impacting other systems. The vulnerability is resolved in Deno version 1.41.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.