Lucene search
Veracode Vulnerability DatabaseVERACODE:44203HistoryNov 09, 2023 - 7:17 a.m.
Insecure Parsing Of File Path
2023-11-0907:17:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
vulnerability
insecure parsing
file path
go
software
go is vulnerable to Insecure Parsing Of File Path. The vulnerability is due to the IsLocal function which insufficiently determines if reserved file names such as COM1 are local. An attacker can inject filenames with trailing spaces and superscripts, which will incorrectly deem these paths as local.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/golang/go | le | go1.21.3 | |
| github.com/golang/go | le | go1.20.10 | |
| github.com/golang/go | le | go1.21.3 | |
| github.com/golang/go | le | go1.20.10 |
Related
debiancve
debiancve
CVE-2023-45284
2023-11-09 17:15:08
osv
osv
CVE-2023-45284
2023-11-09 17:15:08
Incorrect detection of reserved device names on Windows in path/filepath
2023-11-08 22:42:19
BIT-golang-2023-45284
2024-03-06 10:52:50
cve
cve
CVE-2023-45284
2023-11-09 17:15:08
prion
prion
Code injection
2023-11-09 17:15:00
cvelist
cvelist
cbl_mariner
cbl_mariner
CVE-2023-45284 affecting package golang for versions less than 1.21.6-1
2024-05-29 03:07:37
ubuntucve
ubuntucve
CVE-2023-45284
2023-11-09 00:00:00
CVE-2023-45283
2023-11-09 00:00:00
nessus
nessus
openvas
openvas
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4470-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4471-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4931-1)
2024-03-04 00:00:00
amazon
amazon
Medium: golang
2024-01-03 21:04:00
Medium: golang
2024-01-03 22:37:00
ibm
ibm
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0531
2023-12-22 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0176
2023-12-21 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0702
2023-12-21 00:00:00