Loading HuntDB...

fs.openAsBlob() bypasses permission system

Medium
N
Node.js
Submitted None
Reported by cjihrig

Vulnerability Details

Technical details and impact analysis

Improper Access Control - Generic
**Summary:** [add summary of the vulnerability] `fs.openAsBlob()` does not appear to be limited by the permission system. **Description:** [add more details about this vulnerability] Starting Node with `--experimental-permission` does not appear to restrict `fs.openAsBlob()`. ## Steps To Reproduce: Run the following code with `--experimental-permission` and do not grant is read access to `file.txt`: ```js 'use strict'; const fs = require('node:fs'); async function main() { const blob = await fs.openAsBlob(__dirname + '/file.txt'); console.log(await blob.text()); } main(); ``` ## Impact: [add why this issue matters] The permission system is bypassed when it should not be. ## Supporting Material/References: None ## Impact An attacker can read files they should not be able to.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Improper Access Control - Generic