CVE:CVE-2020-8201
CNNVD:CNNVD-202009-952
Node.js是一个开源、跨平台的 JavaScript 运行时环境。
Node.js 存在环境问题漏洞，该漏洞源于CR-to-Hyphen,攻击者可利用该漏洞绕过限制获取敏感信息。
solution:Upgrade nodejs node.js to a higher version than 12.18.4,14.11.0,and avoid the version [12.0.0,12.18.4),[14.0.0,14.11.0); Upgrade opensuse leap to a higher version than 15.2,and avoid the version 15.2; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33