Lucene search

K
osvGoogleOSV:GHSA-M9VJ-44F3-78XW
HistoryJun 01, 2022 - 12:00 a.m.

Path traversal in CureKit

2022-06-0100:00:35
Google
osv.dev
14
curekit
path traversal
vulnerability
v1.0.1-v1.1.3
software

EPSS

0.002

Percentile

61.3%

CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.

EPSS

0.002

Percentile

61.3%

Related for OSV:GHSA-M9VJ-44F3-78XW