Lucene search

K
osvGoogleOSV:CVE-2022-21221
HistoryMar 17, 2022 - 12:15 p.m.

CVE-2022-21221

2022-03-1712:15:08
Google
osv.dev
5

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.6%

The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. Note: This security issue impacts Windows users only.

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.6%