Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38682
HistoryDec 29, 2022 - 8:43 a.m.

Path Traversal

2022-12-2908:43:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
path traversal
goa
service.go
vulnerability
software

EPSS

0.004

Percentile

74.8%

github.com/goadesign/goa is vulnerable to path traversal. The vulnerability exists in service.go due to improper path sanitization which allows an attacker to overwrite files outside of the extraction directory.

EPSS

0.004

Percentile

74.8%