CVE-2022-29804

2022-08-1020:15:34

Google

osv.dev

0.002 Low

EPSS

Percentile

52.6%

JSON

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.

CPENameOperatorVersion
goeqweekly.2011-10-25
goeqweekly.2010-03-22
goeqweekly.2010-08-25
goeqgo1.10rc2
goeqweekly.2011-02-01.1
goeqweekly.2012-01-27
goeqweekly.2010-07-29
goeqweekly.2011-11-18
goeqweekly.2011-01-20
goeqweekly.2011-07-29

Name	Operator	Version
go	eq	weekly.2011-10-25
go	eq	weekly.2010-03-22
go	eq	weekly.2010-08-25
go	eq	go1.10rc2
go	eq	weekly.2011-02-01.1
go	eq	weekly.2012-01-27
go	eq	weekly.2010-07-29
go	eq	weekly.2011-11-18
go	eq	weekly.2011-01-20
go	eq	weekly.2011-07-29