Lucene search

K
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-B26673076B6C5D6EAA7BA8C08007A001
HistoryJul 05, 2022 - 12:00 a.m.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

2022-07-0500:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
10

0.001 Low

EPSS

Percentile

50.7%

The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.

0.001 Low

EPSS

Percentile

50.7%

Related for GITLAB-B26673076B6C5D6EAA7BA8C08007A001