Vulnerabilities > Chownr Project

DATE CVE VULNERABILITY TITLE RISK
2020-06-15 CVE-2017-18869 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Chownr Project Chownr
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.
local
high complexity
chownr-project CWE-367
2.5