CVE-2021-23772

CVE-2021-23772 affects all versions of github.com/kataras/iris and iris/v12, due to unsafe handling of filenames in UploadFormFiles that can allow writing to arbitrary locations outside the target folder. Multiple sources (Red Hat, SUSE, OSV, CVE listings) consistently describe a directory-traver...