CVE-2023-30583

CVE-2023-30583 describes a high-severity vulnerability in Node.js 20 where the fs.openAsBlob() function can bypass the experimental file system read restriction, even when the --allow-fs-read flag is used. This flaw stems from a missing security check, allowing unauthorized access to files. With a CVSS score of 7.5, this vulnerability presents a network-based attack vector with low complexity, potentially leading to high confidentiality impact without requiring user interaction. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.