Lack of data validation - Path Traversal In golang-1.15
Description
A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as "a/../c:/b" into the valid path "c:\b". This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack. After fix, the filepath.Clean function transforms this path into the relative (but still invalid) path ".\c:\b".
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | - | ||
debian 12 | 1.19.6-2 | ||
 go | 1.19.6 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3.