Lucene search
GoogleOSV:GO-2022-0533HistoryJul 28, 2022 - 5:25 p.m.
Path traversal via Clean on Windows in path/filepath
2022-07-2817:25:07
Google
osv.dev
29
windows
filepath
clean function
directory traversal
security
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.002
Percentile
53.0%
On Windows, the filepath.Clean function can convert certain invalid paths to valid, absolute paths, potentially allowing a directory traversal attack.
For example, Clean(“.\c:”) returns “c:”.
Related
alpinelinux
alpinelinux
CVE-2022-29804
2022-08-10 20:15:34
veracode
veracode
Path Traversal
2022-06-16 03:04:13
osv
osv
BIT-golang-2022-29804
2024-03-06 11:00:46
CVE-2022-29804
2022-08-10 20:15:34
go1.18-1.18.3-1.1 on GA media
2024-06-15 00:00:00
nvd
nvd
CVE-2022-29804
2022-08-10 20:15:34
debiancve
debiancve
CVE-2022-29804
2022-08-10 20:15:34
ubuntucve
ubuntucve
CVE-2022-29804
2022-08-10 00:00:00
cve
cve
CVE-2022-29804
2022-08-10 20:15:34
prion
prion
Directory traversal
2022-08-10 20:15:00
cvelist
cvelist
CVE-2022-29804 Path traversal via Clean on Windows in path/filepath
2022-08-09 00:00:00
suse
suse
Security update for go1.17 (important)
2022-06-07 00:00:00
Security update for go1.18 (important)
2022-06-07 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:2004-1)
2022-06-08 00:00:00
openSUSE: Security Advisory for go1.17 (SUSE-SU-2022:2004-1)
2022-06-08 00:00:00
openSUSE: Security Advisory for go1.18 (SUSE-SU-2022:2005-1)
2022-06-08 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : golang (EulerOS-SA-2022-2731)
2022-11-14 00:00:00
EulerOS 2.0 SP9 : golang (EulerOS-SA-2022-2766)
2022-11-14 00:00:00
SUSE SLED15 / SLES15 Security Update : go1.18 (SUSE-SU-2022:2005-1)
2022-06-08 00:00:00
ibm
ibm
oraclelinux
oraclelinux
ol8addon security update
2022-07-12 00:00:00
go-toolset:ol8addon security update
2022-07-12 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2022-06-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.17.11-alt1.p10
2022-06-14 00:00:00
Security fix for the ALT Linux 10 package golang version 1.18.3-alt1
2022-06-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-4.0-0242
2022-09-07 00:00:00
Important Photon OS Security Update - PHSA-2022-0242
2022-09-07 00:00:00
Critical Photon OS Security Update - PHSA-2022-0512
2022-09-06 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.002
Percentile
53.0%
Related for OSV:GO-2022-0533