CVE-2022-29804

Path traversal via Clean on Windows in path/filepath

published August 9, 2022

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02261 · 82.8th percentile
Published
2022-08-09T00:00Z
EPSS history
Timeline
  • 09 AUG 00:00Z
    Path traversal via Clean on Windows in path/filepath
    cvelistv5