(CVE-2023-32003) fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks

Posted on October 8, 2023by bugbounty

Internet Bug Bounty disclosed a bug submitted by haxatron1: https://hackerone.com/reports/2104567