In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| io.whitesource:curekit(Maven) | 1.0.1 | 1.1.4 | N/A |
CVSS Metrics
