Description
In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.
Remediation
References
https://github.com/whitesource/CureKit/commit/af35e870ed09411d2f1fae6db1b04598cd1a31b6
https://www.mend.io/vulnerability-database/CVE-2022-23082
Related Vulnerabilities
CVE-2022-35915 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts-upgradeable
CVE-2018-11761 Vulnerability in maven package org.apache.tika:tika-parsers
CVE-2017-16003 Vulnerability in npm package windows-build-tools
CVE-2022-41931 Vulnerability in maven package org.xwiki.platform:xwiki-platform-icon-ui
CVE-2020-28458 Vulnerability in maven package org.webjars.npm:datatables.net