Security Advisory

CVE-2022-29804

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-09 00:00:00
Last updated 2024-08-03 06:33:42
Assigner Go
State PUBLISHED

Description

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.