Setting unsafe POSIX file permissions can be insecure and can lead to unintended access to files.

In Unix, the "others" class refers to all users except the owner of the file and the members of the group assigned to this file. Granting permissions to this group of users can lead to unintended access to files.

Bad Practice

const fs = require('fs');
const process = require('process');

fs.chmodSync("/tmp/fs", 0o777); // Sensitive
  // ...
})
process.umask(0o777); // Sensitive

Recommended

const fs = require('fs');
const process = require('process');

fs.chmodSync("/tmp/fs", 0o770); // Compliant
  // ...
})
process.umask(0o770); // Compliant

References

OWASP A01:2021 - Broken Access Control
Porous Defenses
Incorrect Permission Assignment for Critical Resource
Incorrect Privilege Assignment

deepsourcestatus / test-repository

No ignore rules found