Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2022-41722
HistoryMay 11, 2023 - 4:21 a.m.

CVE-2022-41722

2023-05-1104:21:28
redhat.com
access.redhat.com
18
go
directory traversal
windows package
file access
remote attack

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

54.2%

JSON

A flaw was found in Go, where it could allow a remote attacker to traverse directories on the system, caused by improper validation of user requests by the filepath.Clean on Windows package. This flaw allows an attacker to send a specially-crafted URL request containing “dot dot” sequences (/…/) to view arbitrary files on the system.

Related

alpinelinux 1
nvd 1
cbl_mariner 4
osv 6
nessus 21
cve 1
veracode 1
wolfi 1
debiancve 1
cvelist 1
cgr 1
ubuntucve 1
prion 1
freebsd 1
altlinux 1
openvas 1
photon 7
redhat 4
ibm 5
amazon 3
alpinelinux
alpinelinux
CVE-2022-41722
2023-02-28 18:15:09
nvd
nvd
CVE-2022-41722
2023-02-28 18:15:09
cbl_mariner
cbl_mariner
CVE-2022-41722 affecting package golang 1.17.13-2
2024-09-20 21:11:54
CVE-2022-41722 affecting package golang for versions less than 1.22.6-1
2024-08-14 20:43:58
CVE-2022-41722 affecting package msft-golang for versions less than 1.19.8-1
2023-04-16 01:04:22
osv
osv
CVE-2022-41722
2023-02-28 18:15:09
CGA-f3qc-96rj-fjgq
2024-06-06 12:27:01
BIT-golang-2022-41722
2024-03-06 10:57:57
nessus
nessus
CBL Mariner 2.0 Security Update: msft-golang / golang (CVE-2022-41722)
2024-08-10 00:00:00
FreeBSD : go -- multiple vulnerabilities (3d73e384-ad1f-11ed-983c-83fe35862e3a)
2023-02-15 00:00:00
RHCOS 4 : OpenShift Container Platform 4.13.2 (RHSA-2023:3366)
2024-01-24 00:00:00
cve
cve
CVE-2022-41722
2023-02-28 18:15:09
veracode
veracode
Path Traversal
2023-10-18 08:31:33
wolfi
wolfi
CVE-2022-41722 vulnerabilities
2024-09-20 21:14:10
debiancve
debiancve
CVE-2022-41722
2023-02-28 18:15:09
cvelist
cvelist
CVE-2022-41722 Path traversal on Windows in path/filepath
2023-02-28 17:19:41
cgr
cgr
CVE-2022-41722 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2022-41722
2023-02-28 00:00:00
prion
prion
Path traversal
2023-02-28 18:15:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-02-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.19.6-alt1
2023-02-22 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0733-1)
2023-03-28 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0362
2023-03-23 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0564
2023-04-06 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0425
2023-07-12 00:00:00
redhat
redhat
(RHSA-2023:3304) Moderate: OpenShift Container Platform 4.13.1 bug fix and security update
2023-05-30 20:11:34
(RHSA-2023:3366) Important: OpenShift Container Platform 4.13.2 packages and security update
2023-06-07 01:52:31
(RHSA-2023:1325) Important: OpenShift Container Platform 4.13.0 security update
2023-05-17 22:37:00
ibm
ibm
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Golang Go
2023-06-28 20:59:10
Security Bulletin: Vulnerabilities in Golang, Python, postgresql, cURL libcurl might affect IBM Spectrum Copy Data Management
2023-06-16 19:25:04
Security Bulletin: Vulnerabilities in Pypa Setuptools, Golang Go, OpenSSH, Minio and Certifi may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift
2023-03-29 15:18:12
amazon
amazon
Important: golang
2023-04-13 19:28:00
Important: golang
2023-04-13 19:01:00
Important: golang
2023-09-27 22:15:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

54.2%

JSON
Related for RH:CVE-2022-41722
alpinelinux1nvd1cbl_mariner4osv6nessus21cve1veracode1wolfi1debiancve1cvelist1cgr1ubuntucve1prion1freebsd1altlinux1openvas1photon7redhat4ibm5amazon3