CVE-2022-23082: CureKit - Path Traversal in isFileOutsideDir
Published May 31, 2022
·Updated
In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.
Affected Software
1 affected component
Mend Curekit>=1.0.1<=1.1.3
Remediation
Information
Upgrade to version V1.1.4
Event History
May 31, 2022
CVE Published
via MITRE·02:40 PM
Data Sourced
via MITRE·02:40 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-23082?
CVE-2022-23082 is considered a medium severity vulnerability due to its potential for exploitation.
2
How do I fix CVE-2022-23082?
To fix CVE-2022-23082, upgrade to CureKit version 1.1.4 or later, where the path traversal issue has been addressed.
3
What versions of CureKit are affected by CVE-2022-23082?
CureKit versions 1.0.1 through 1.1.3 are affected by CVE-2022-23082.
4
What does CVE-2022-23082 exploit?
CVE-2022-23082 exploits a path traversal vulnerability in the isFileOutsideDir function due to inadequate input sanitization.
5
Is user input a factor in CVE-2022-23082?
Yes, user input is a significant factor in CVE-2022-23082, as the vulnerability arises from failure to properly sanitize it.