Lucene search
CVE-2022-41720
On Windows, os.DirFS and http.Dir can access restricted files, including Windows device files like COM1. Maliciously crafted paths can escape drive root and access system paths. Fixes applied for os.DirFS("")
Show more
| Reporter | Title | Published | Views | Family All 50 |
|---|---|---|---|---|
 | CVE-2022-41720 | 16 Jan 202313:05 | – | redhatcve |
 | Design/Logic Flaw | 7 Dec 202217:15 | – | prion |
 | CVE-2022-41720 | 7 Dec 202217:15 | – | nvd |
 | CVE-2022-41720 | 7 Dec 202217:15 | – | debiancve |
 | Path Traversal | 8 Dec 202202:28 | – | veracode |
 | CGA-R7QJ-95GJ-82GX | 6 Jun 202412:26 | – | osv |
| CVE-2022-41720 | 7 Dec 202217:15 | – | osv |
| GO-2022-1143 Restricted file access on Windows in os and net/http | 7 Dec 202216:08 | – | osv |
| BIT-GOLANG-2022-41720 | 6 Mar 202410:58 | – | osv |
| OPENSUSE-SU-2024:12552-1 go1.18-1.18.9-1.1 on GA media | 15 Jun 202400:00 | – | osv |
10
[
{
"vendor": "Go standard library",
"product": "os",
"collectionURL": "https://pkg.go.dev",
"packageName": "os",
"versions": [
{
"version": "0",
"lessThan": "1.18.9",
"status": "affected",
"versionType": "semver"
},
{
"version": "1.19.0-0",
"lessThan": "1.19.4",
"status": "affected",
"versionType": "semver"
}
],
"platforms": [
"windows"
],
"programRoutines": [
{
"name": "dirFS.Open"
},
{
"name": "dirFS.Stat"
},
{
"name": "DirFS"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Go standard library",
"product": "net/http",
"collectionURL": "https://pkg.go.dev",
"packageName": "net/http",
"versions": [
{
"version": "0",
"lessThan": "1.18.9",
"status": "affected",
"versionType": "semver"
},
{
"version": "1.19.0-0",
"lessThan": "1.19.4",
"status": "affected",
"versionType": "semver"
}
],
"platforms": [
"windows"
],
"programRoutines": [
{
"name": "Dir.Open"
},
{
"name": "ServeFile"
},
{
"name": "fileHandler.ServeHTTP"
},
{
"name": "fileTransport.RoundTrip"
}
],
"defaultStatus": "unaffected"
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo07 Dec 2022 17:15Current
7.4High risk
Vulners AI Score7.4
CVSS37.5
EPSS0.00039
SSVC