CVE-2020-36559

CVE-2020-36559 describes a path-traversal vulnerability in the Go web framework aah (HTTPEngine.Handle). The root cause is improper sanitization of user input, allowing an attacker to read files outside the target directory that the server has permission to read. The vulnerability is documented a...