LOW 3.5 npm
Duplicate Advisory: Node CLI Allows Arbitrary File Overwrite
GHSA-3mrp-qhcj-mwv5 · CVE-2016-1000021
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-6cpc-mj5c-m9rq. This link is maintained to preserve external references.
Original Description
An issue exists in node-cli 0.1.0 through 0.11.3 due to predictable temporary file names in lock_file and log_file, which allows an attacker to overwrite files.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2016-1000021
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2016-10538
- WEB https://github.com/node-js-libs/cli/issues/81
- WEB https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000021
- WEB https://web.archive.org/web/20190430172230/https://www.npmjs.com/advisories/95
Ready to move
Start Securing
Free, no credit card | First findings in minutes