CVE-2022-23082
CureKit - Path Traversal in isFileOutsideDir
HIGH 7.5EPSS 1.3%
In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.
- Affected
- WhiteSource · CureKit
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 1.31% chance of exploitation in the next 30 days, 70th percentile
- Published
- 2022-05-31
- Updated
- 2024-09-17
Proof-of-concept exploits (1)
- shoucheng3/whitesource__curekit_CVE-2022-23082_1-1-30★ · 2025-08-16
Security advisories
- https://www.mend.io/vulnerability-database/CVE-2022-23082
- whitesource/CureKit/commit/af35e870ed09411d2f1fae6db1b04598cd1a31b6
- advisories/GHSA-m9vj-44f3-78xw