Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40089
HistoryApr 10, 2023 - 4:35 a.m.

Path Traversal

2023-04-1004:35:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
path traversal
github.com/sjqzhang/go-fastdfs
upload function
file upload handler
software

0.002 Low

EPSS

Percentile

57.6%

github.com/sjqzhang/go-fastdfs is vulnerable to Path Traversal. The vulnerability exists because the Upload function of fileserver.go does not properly check custom paths, which allows an attacker to access files outside the expected directory through the /group1/upload in the File Upload Handler component.

0.002 Low

EPSS

Percentile

57.6%

Related for VERACODE:40089