Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37324
HistorySep 29, 2022 - 4:48 a.m.

Path Traversal

2022-09-2904:48:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
path traversal
github.com/cloudwego/hertz
windows server
vulnerability
normalizepath function

0.001 Low

EPSS

Percentile

48.8%

github.com/cloudwego/hertz is vulnerable to path traversal. The vulnerability exists in normalizePath function of uri.go because the backslash restrictions are not properly implemented which allows an attacker to read any file in windows server.

0.001 Low

EPSS

Percentile

48.8%

Related for VERACODE:37324