CVE-2021-23772

Published December 24th, 2021

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder.

kataras/iris

The fastest HTTP/2 Go Web Framework. New, modern and easy to learn. Fast development with Code you control. Unbeatable cost-performance ratio :rocket:

GitHub

25.6K