whitesource__curekit_CVE-2022-23082_1-1-3

CureKit - WhiteSource Cure Encoding Package CureKit is a security library mostly used by the WhiteSource Cure self-fixing product. WhiteSource Cure is an innovative solution that automatically generates remediation suggestions for vulnerabilities identified by detection tools in proprietary code...

EUVD-2022-6091

Malicious code in bioql PyPI...

Path Traversal

CureKit is vulnerable to path traversal. The vulnerability exists in isFileOutsideDir function in FileSecurityUtils.java because it doesn't properly sanitize the user inputs which allows an attacker to gain access to the files in the system...

GHSA-M9VJ-44F3-78XW Path traversal in CureKit

CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...

Path traversal in CureKit

CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...

CVE-2022-23082

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...

Path traversal

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...

CVE-2022-23082 CureKit - Path Traversal in isFileOutsideDir

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...

CVE-2022-23082 CureKit - Path Traversal in isFileOutsideDir

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...

CVE-2022-23082

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...

CVE-2022-23082

CVE-2022-23082 affects CureKit v1.0.1–v1.1.3. The function isFileOutsideDir fails to sanitize user input, enabling path traversal and potential access to restricted files (confidentiality impact). CVSSv3.1 base score 7.5 (HIGH). No remediation details provided in the supplied documents; monitor f...

CVE-2022-23082

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...

PT-2022-15838

Name of the Vulnerable Software and Affected Versions CureKit versions v1.0.1 through v1.1.3 Description The issue arises from the function isFileOutsideDir failing to sanitize user input, which may lead to path traversal. Recommendations For CureKit versions v1.0.1 through v1.1.3, consider...

WhiteSource CureKit 路径遍历漏洞

WhiteSource CureKit is a security library for WhiteSource Cure self-healing products from WhiteSource Japan. A security vulnerability exists in WhiteSource CureKit versions 1.0.1 through 1.0.3, which stems from isFileOutsideDir failing to properly clean up user input that could result in path...

CVE-2022-23082: Improper Limitation of a Pathname to a Restricted Directory

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...