Description (CNA)
Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| github.com/goadesign/goa / github.com/goadesign/goa | affected 0 before 1.4.3 |
| goa.design/goa / goa.design/goa | affected 0 before 1.4.3 |
| goa.design/goa/v3 / goa.design/goa/v3 | affected 0 before 3.0.9 |
CWE
No CWE identifiers supplied.
References
- https://github.com/goadesign/goa/pull/2388
- https://github.com/goadesign/goa/commit/70b5a199d0f813d74423993832c424e1fc73fb39
- https://pkg.go.dev/vuln/GO-2020-0032
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.