Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Christi3K

#38236of 56,331
7.5Total CVSS
Vulnerabilities · 1
PT-2021-9104
7.5
2021-04-14
Goa · Goa · CVE-2019-25073
**Name of the Vulnerable Software and Affected Versions** github.com/goadesign/goa versions prior to 3.0.9 github.com/goadesign/goa versions prior to 2.0.10 github.com/goadesign/goa versions prior to 1.4.3 **Description** The issue is related to improper path sanitization, allowing remote attackers to read files outside of the intended directory due to insufficient sanitization of user input. This enables directory traversal, permitting an attacker to access files that the server has permission to read, outside of the target directory. **Recommendations** For versions prior to 3.0.9, update to version 3.0.9 or later. For versions prior to 2.0.10, update to version 2.0.10 or later. For versions prior to 1.4.3, update to version 1.4.3 or later.