Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-21221
HistoryMar 17, 2022 - 12:15 p.m.

Directory traversal

2022-03-1712:15:00
PRIOn knowledge base
www.prio-n.com
2

0.002 Low

EPSS

Percentile

61.6%

The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. Note: This security issue impacts Windows users only.

CPENameOperatorVersion
fasthttplt1.34.0

0.002 Low

EPSS

Percentile

61.6%