GHSA-c9qr-f6c8-rgxfHighCVSS 7.5

Hertz contains path traversal via normalizePath function

Published
September 29, 2022
Last Modified
February 14, 2023

🔗 CVE IDs covered (1)

CVE-2022-40082 →

📋 Description

Hertz is a a high-performance and strong-extensibility Go HTTP framework that helps developers build microservices. Versions of Hertz prior to 0.3.1 contain a path traversal vulnerability via the normalizePath function. This issue has been patched in 0.3.1.

🎯 Affected products1

  • go/github.com/cloudwego/hertz:< 0.3.1

🔗 References (5)