~ / search / GHSA-2x48-p6cq-5xcw

GHSA-2x48-p6cq-5xcw

Path Traversal in github.com/go-sonic/sonic

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-46959

Packages

EcosystemPackageAffectedFixed in
Go github.com/go-sonic/sonic < 1.0.5 1.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.

References

External links from the advisory. They lead to third-party sites.