Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36871
HistorySep 01, 2022 - 4:39 a.m.

Path Traversal

2022-09-0104:39:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
github
fluxcd
flux2
vulnerability
path traversal
library
user input
attacker
files
directory
deployment

EPSS

0

Percentile

9.9%

github.com/fluxcd/flux2 is vulnerable to path traversal. The vulnerability exists because the library does not properly handle the user-supplied input, allowing an attacker to access files outside the expected directory and replace the flux deployment information with arbitrary content.

EPSS

0

Percentile

9.9%

Related for VERACODE:36871