CVE-2022-23082CWE-22

CureKit - Path Traversal in isFileOutsideDir

High · published May 31, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01329 · 70.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-05-31T14:40Z
EPSS history
Timeline
  • 31 MAY 14:40Z
    CureKit - Path Traversal in isFileOutsideDir
    cvelistv5