Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Publié le
Par The Hacker News
NODE.JS BROTLI DECODER BUG COULD ALLOW REMOTE CODE EXECUTION IN ALL SUPPORTED VERSIONS
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacker could run code of
IMPACTS POUR LES ORGANISATIONS
- ▸Non-conformité réglementaire exposant à des sanctions financières.
- ▸Atteinte à la réputation et perte de confiance des parties prenantes.
- ▸Obligation de mise en conformité sous contrainte de délais.
▶ ÉVALUATION DE LA CONFORMITÉ ET MISE EN PLACE DES MESURES CORRECTIVES
Source : The Hacker News
SECURITRUST
Source
Article original publié par The Hacker News : Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions