CVE-2024-34346

CVSS 3.1 Score 8.4 of 10 (high)

Details

Published May 7, 2024
Updated: May 8, 2024
CWE ID 863

Summary

CVE-2024-34346 is a vulnerability affecting Deno, a JavaScript, TypeScript, and WebAssembly runtime. The vulnerability allows file read/write access to privileged files in various locations on Unix and Windows platforms, potentially weakening the Deno sandbox. Granting read and write access to the entire filesystem may unintentionally grant additional permissions via file-system operations. Deno versions 1.43 and above require explicit `--allow-all` access to certain paths such as `/etc`, `/dev`, `/proc`, and `/sys` on Linux platforms. This vulnerability has a high base severity score of 8.4 and poses a potential danger to organizations as it could lead to unauthorized access, data compromise, and system integrity issues if exploited. It is recommended to update Deno to the latest version and review file access permissions to mitigate this vulnerability.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-34346 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options