Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2022-23082

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.

VectorNETWORK

PublishedMay 31, 2022, 15:15

Published Byvulnerabilitylab@mend.io

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

io.whitesource:curekit(Maven)1.0.11.1.4N/A

References

https://github.com/whitesource/CureKit/commit/af35e870ed09411d2f1fae6db1b04598cd1a31b6
https://www.mend.io/vulnerability-database/CVE-2022-23082

Weakness Type

CWE-22

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK