medium4.3
CVE-2022-46959
Path Traversal in github.com/go-sonic/sonic
Impact
An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/go-sonic/sonic | < 1.0.5 | 1.0.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonic Project | Sonic | Version 1.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/go-sonic/sonic/issues/56
- https://github.com/advisories/GHSA-2x48-p6cq-5xcw
- https://nvd.nist.gov/vuln/detail/CVE-2022-46959
- https://github.com/go-sonic/sonic/pull/61/commits/3b00266a13fa69284f4b3f4b37d29be8f8e02f31
- https://github.com/go-sonic/sonic/releases/tag/v1.0.5