CVE-2022-46959

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

CVE-2022-46959

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

CVE-2022-46959

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

CVE-2022-46959

Sonic go-sonic v1.0.4 is affected by a Path Traversal vulnerability in the /admin/backups/work-dir component. The issue allows an attacker to traverse directories and access files outside the intended directory, due to insufficient sanitization in the backup workflow (BackupWholeSite/toBackupPath...