whitesource__curekit_CVE-2022-23082_1-1-3

CureKit - WhiteSource Cure Encoding Package CureKit is a security library mostly used by the WhiteSource Cure self-fixing product. WhiteSource Cure is an innovative solution that automatically generates remediation suggestions for vulnerabilities identified by detection tools in proprietary code...

CVE-2022-23082

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...

CVE-2022-23082

CVE-2022-23082 affects CureKit v1.0.1–v1.1.3. The function isFileOutsideDir fails to sanitize user input, enabling path traversal and potential access to restricted files (confidentiality impact). CVSSv3.1 base score 7.5 (HIGH). No remediation details provided in the supplied documents; monitor f...

CVE-2022-23082

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal...