Lucene search
Veracode Vulnerability DatabaseVERACODE:40206HistoryApr 20, 2023 - 7:58 a.m.
Directory Traversal
2023-04-2007:58:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
directory traversal
vulnerability
router.go
file download
host security
arbitrary file
0.001 Low
EPSS
Percentile
29.2%
github.com/gobbscom/go-bbs is vulnerable to Directory Traversal. The vulnerability exists in the init function of router.go, which allows an attacker to bypass file download restrictions through the /api/v1/download component and download arbitrary file from the host.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/gobbscom/go-bbs | eq | HEAD | |
| github.com/gobbscom/go-bbs | eq | HEAD |
Related
nvd
nvd
CVE-2023-27755
2023-04-17 14:15:07
cve
cve
CVE-2023-27755
2023-04-17 14:15:07
prion
prion
Arbitrary file deletion
2023-04-17 14:15:00
cvelist
cvelist
CVE-2023-27755
2023-04-17 00:00:00
wallarmlab
wallarmlab
ChatGPT: Friend or Foe? | API Security Newsletter
2023-05-16 13:58:20