high7.5
CVE-2022-23082
Path traversal in CureKit
Impact
CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function `isFileOutsideDir` fails to sanitize the user input which may lead to path traversal.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.whitesource:curekit | >= 1.0.1, < 1.1.4 | 1.1.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mend | Curekit | from 1.0.1 through 1.1.3 |