GitHub Advisoryadvisory · Go

GHSA-x8xm-wrjq-5g54 Stakater Forecastle has a directory traversal vulnerability

HIGH Published 2024-05-15 Modified 2024-05-16 Official page ↗
Aliases
CVE-2023-40297
Ecosystem
Go
Packages
github.com/stakater/Forecastle
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2024-05-16

Affected packages

• Go github.com/stakater/Forecastle: <= 1.0.139 (no fix yet)

Description

Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component.

Related

Alias · CVE (1)

  • CVE-2023-40297 Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References