Tracker / CVE-2022-29804
CVE-2022-29804
High 7.5
Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.
Affected products and versions
| golang | go · … → 1.17.11 |
|---|---|
| golang | go · 1.18.0 → 1.18.3 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.