地图 / Node Installer Local Privilege Escalation

Node Installer Local Privilege Escalation

访问控制 / 权限提升 / #1211160

厂商: Node.js
严重程度: 低危 · CVSS 6.7
赏金: —
弱点: 权限提升
研究员: @deepsurface-robert
披露日期: 2021-07-01
资产: https://github.com/nodejs/node
CVE: CVE-2021-22117 CVE-2021-22921 CVE-2021-29221

该报告还没有中文解读。

原文摘录

摘自原文（3215 字符中的一小部分）

Node is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PATH and DLL hijacking.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Node.js 所有。

时间线

2021-05-28报告提交
2021-07-01公开披露

阅读 HackerOne 原文 ↗作者 @deepsurface-robert · 版权归作者与 Node.js 所有

同类报告

Email Confirmation Bypass in your-store.myshopify.com which leads to privilege escalationShopify · 2020-09-15 Shopify Stocky App OAuth MisconfigurationShopify · 2019-12-11 Able to Become Admin for Any LINE Official AccountLY Corporation · 2020-03-25 Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requestsGitLab · 2019-11-27 · $12,000 Read-only application can publish/delete fleetsX / xAI · 2021-01-04 Subdomain takeover of datacafe-cert.starbucks.comStarbucks · 2019-08-28