CVE-2022-46959

Path Traversal in github.com/go-sonic/sonic in go/github.com/go-sonic/sonic

Identifiers

GHSA-2x48-p6cq-5xcw, CVE-2022-46959

Package Slug

go/github.com/go-sonic/sonic

Vulnerability

Path Traversal in github.com/go-sonic/sonic

Description

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.

Affected Versions

All versions before 1.0.5

Solution

Upgrade to version 1.0.5 or above.

Last Modified

2023-01-24

source