Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35782
HistoryJun 01, 2022 - 7:20 a.m.

Path Traversal

2022-06-0107:20:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
curekit
path traversal
filesecurityutils
vulnerability
user inputs
system access

EPSS

0.002

Percentile

61.3%

CureKit is vulnerable to path traversal. The vulnerability exists in isFileOutsideDir function in FileSecurityUtils.java because it doesn’t properly sanitize the user inputs which allows an attacker to gain access to the files in the system.

EPSS

0.002

Percentile

61.3%

Related for VERACODE:35782