Security Advisory

CVE-2021-23772

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-12-24 12:05:14

Last updated 2024-09-16 20:03:06

Assigner snyk

State PUBLISHED

Description

This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder.

← Browse all CVEs View on cve.org ↗