CVE-2024-37372
CVSS 3.0 Score 3.6 of 10 (low)
Details
Published Jan 9, 2025
CWE ID 22
Summary
CVE-2024-37372 is a vulnerability affecting the Permission Model. This issue arises due to an assumption that any path starting with two backslashes (\\) has a four-character prefix that can be disregarded. However, this is not a consistently true condition, leading to vulnerable edge cases. The flaw can potentially allow unauthorized access or other malicious activities, making it a significant security concern. It is imperative for affected systems to apply the necessary patches or updates as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Node.js
Affected Vendors
- OpenJS Foundation