CVE-2023-30586

A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or disable the permission model. The attack complexity is high. However, the crypto.setEngine() API can be used to bypass the permission model when called with a compatible OpenSSL engine. The OpenSSL engine can, for example, disable the permission model in the host process by manipulating the process's stack memory to locate the permission model Permission::enabled_ in the host process's heap memory. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.

• CWE-862
• CWE-862

• https://hackerone.com/reports/1954535Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230803-0008/Third Party Advisory
• https://hackerone.com/reports/1954535Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230803-0008/Third Party Advisory

Published

Jul 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3058A vulnerability was found in 07FLY CRM up to 1.2.0. It has b…5.4
• CVE-2023-30581The use of __proto__ in process.mainModule.__proto__.require…7.5
• CVE-2023-30582A vulnerability has been identified in Node.js version 20, a…5.3
• CVE-2023-30583fs.openAsBlob() can bypass the experimental permission model…7.5
• CVE-2023-30584A vulnerability has been discovered in Node.js version 20, s…7.7
• CVE-2023-30585A vulnerability has been identified in the Node.js (.msi ver…7.5
• CVE-2023-30587A vulnerability in Node.js version 20 allows for bypassing r…7.5
• CVE-2023-30588When an invalid public key is used to create an x509 certifi…5.3
• CVE-2023-30589The llhttp parser in the http module in Node v20.2.0 does no…7.5
• CVE-2023-3059A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-30590The generateKeys() API function returned from crypto.createD…7.5
• CVE-2023-30591Denial-of-service in NodeBB <= v2.8.10 allows unauthenticate…7.5