Lucene search

K
osvGoogleOSV:CVE-2022-23082
HistoryMay 31, 2022 - 3:15 p.m.

CVE-2022-23082

2022-05-3115:15:07
Google
osv.dev
7
curekit vulnerability
path traversal
user input sanitation
software vulnerability

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

61.3%

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

61.3%

Related for OSV:CVE-2022-23082