Lucene search
Veracode Vulnerability DatabaseVERACODE:44204HistoryNov 09, 2023 - 7:21 a.m.
Path Traversal
2023-11-0907:21:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
golang
path traversal
file path validation
windows system
golang is vulnerable to Path Traversal. The vulnerability is due to a lack of file path validation in path_windows.go. This can allows an attacker to access arbitrary locations on a Windows system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/golang/go | le | go1.21.3 | |
| github.com/golang/go | le | go1.20.10 | |
| github.com/golang/go | le | go1.21.3 | |
| github.com/golang/go | le | go1.20.10 |
References
www.openwall.com/lists/oss-security/2023/12/05/2
github.com/golang/go/commit/9e933c189ca3a84f12995b3c799364a06abc4376
github.com/golang/go/issues/63713
go.dev/cl/540277
go.dev/cl/541175
go.dev/issue/63713
go.dev/issue/64028
groups.google.com/g/golang-announce/c/4tU8LZfBFkY
groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ
pkg.go.dev/vuln/GO-2023-2185
security.netapp.com/advisory/ntap-20231214-0008/
Related
prion
prion
Path traversal
2023-11-09 17:15:00
cgr
cgr
CVE-2023-45283 vulnerabilities
2024-05-19 03:07:16
cbl_mariner
cbl_mariner
CVE-2023-45283 affecting package golang for versions less than 1.21.6-1
2024-05-28 21:07:37
cve
cve
CVE-2023-45283
2023-11-09 17:15:08
cvelist
cvelist
debiancve
debiancve
CVE-2023-45283
2023-11-09 17:15:08
wolfi
wolfi
CVE-2023-45283 vulnerabilities
2024-05-28 21:07:31
osv
osv
CVE-2023-45283
2023-11-09 17:15:08
BIT-golang-2023-45283
2024-03-06 10:53:03
Insecure parsing of Windows paths with a \??\ prefix in path/filepath
2023-11-08 22:42:14
nessus
nessus
openvas
openvas
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4470-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4471-1)
2024-03-04 00:00:00
Mageia: Security Advisory (MGASA-2023-0349)
2023-12-18 00:00:00
ubuntucve
ubuntucve
CVE-2023-45284
2023-11-09 00:00:00
CVE-2023-45283
2023-11-09 00:00:00
ibm
ibm
amazon
amazon
Medium: golang
2024-01-03 21:04:00
Medium: golang
2024-01-03 22:37:00
redos
redos
ROS-20240402-17
2024-04-02 00:00:00
mageia
mageia
Updated golang packages fix security vulnerabilities
2023-12-18 01:40:49
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0531
2023-12-22 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0176
2023-12-21 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0702
2023-12-21 00:00:00