Lucene search
GoogleOSV:GHSA-JCXC-RH6W-WF49HistoryJan 06, 2022 - 9:36 p.m.
Link Following in Iris
2022-01-0621:36:19
Google
osv.dev
6
0.003 Low
EPSS
Percentile
71.5%
This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/kataras/iris/v12 | lt | 12.2.0-alpha8 | |
| github.com/kataras/iris | le | 0.0.2 |
Related
cve
cve
CVE-2021-23772
2021-12-24 12:15:07
osv
osv
CVE-2021-23772
2021-12-24 12:15:07
prion
prion
Design/Logic Flaw
2021-12-24 12:15:00
nvd
nvd
CVE-2021-23772
2021-12-24 12:15:07
veracode
veracode
Directory Traversal
2021-12-27 09:33:30
cvelist
cvelist
CVE-2021-23772 Arbitrary File Write
2021-12-24 00:00:00
github
github
Link Following in Iris
2022-01-06 21:36:19
redhatcve
redhatcve
CVE-2021-23772
2021-12-29 14:01:03