Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-29804

Опубликовано: 10 авг. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.

РелизСтатусПримечание
upstream

not-affected

debian: Only affects Go on Windows

Показывать по

РелизСтатусПримечание
impish

ignored

end of life
upstream

not-affected

debian: Only affects Go on Windows

Показывать по

РелизСтатусПримечание
devel

DNE

impish

not-affected

windows only
jammy

not-affected

windows only
kinetic

DNE

lunar

DNE

upstream

not-affected

debian: Only affects Go on Windows

Показывать по

РелизСтатусПримечание
bionic

not-affected

windows only
devel

DNE

focal

not-affected

windows only
jammy

not-affected

windows only
kinetic

DNE

lunar

DNE

upstream

not-affected

debian: Only affects Go on Windows

Показывать по

РелизСтатусПримечание
upstream

not-affected

debian: Only affects Go on Windows

Показывать по

РелизСтатусПримечание
bionic

not-affected

windows only
esm-apps/bionic

not-affected

windows only
upstream

not-affected

debian: Only affects Go on Windows

Показывать по

EPSS

Процентиль: 24%
0.00082
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.

msrc
5 месяцев назад

Path traversal via Clean on Windows in path/filepath

CVSS3: 7.5
debian
больше 3 лет назад

Incorrect conversion of certain invalid paths to valid, absolute paths ...

CVSS3: 7.5
github
больше 3 лет назад

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.

suse-cvrf
больше 3 лет назад

Security update for go1.18

EPSS

Процентиль: 24%
0.00082
Низкий

7.5 High

CVSS3