CVE-2022-41722

Name of the Vulnerable Software and Affected Versions filepath.Clean (affected versions not specified)

Description A path traversal issue exists in the filepath.Clean function on Windows, where it could transform an invalid path, such as a/../c:/b, into a valid path, c:b. This transformation could enable a directory traversal attack. The function now transforms such paths into relative but still invalid paths, like .c:b.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.