whitesource/CureKit

whitesource/CureKit

GitHubGitHub
GitHubgithub.com
cure.whitesource.iocure.whitesource.io
Releases7
Frequency1 month 2 weeks
Last Release
Stars8
A repository containing code security remediation solutions used by WhiteSource Cure
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-23082↗
7.5 HIGH5 MEDIUM

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.