CVE-2022-23082

Description

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.485

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2022-23082 are fixed in Whitesource - curekit 1.1.4	Windows
Vulnerabilities CVE-2022-23082 are fixed in Whitesource - curekit for Linux 1.1.4	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234