POJIA破甲
地图 / CVE-2025-27210

CVE-2025-27210

An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX.

NVD CVSS
—
CWE
—
未来 30 天被利用概率
14.3%
利用等级
高概率(≥10%)
发布时间
—

关联的公开报告 1 份

Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()Node.js · 中危 · 2025-07-15