Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38909
HistoryJan 18, 2023 - 6:00 a.m.

Path Traversal

2023-01-1806:00:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
github
hoffie
larasync
path traversal
file storage
sensitive files

0.002 Low

EPSS

Percentile

54.1%

github.com/hoffie/larasync is vulnerable to Path Traversal. The vulnerability exists in multiple functions of file_storage.go which allows an attacker to traverse through the directory path and gain access to sensitive files.

0.002 Low

EPSS

Percentile

54.1%

Related for VERACODE:38909