Vendors / Chownr Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Chownr Project records in CISA KEV No Chownr Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 13
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.
CVSS 3.1 LOW 2.5· Local · Low privileges · No interaction · EPSS 0.00334 · Published 2020-06-15 · Partial fix · 1.1.0 CWE-367
Open these records in search → All records by CVSS severity
0 0 0 1 0
