Description
An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/go-sonic/sonic | < 1.0.5 | 1.0.5 | GHSA-2x48-p6cq-5xcw |
Medium · 4.3
CVE-2022-46959
EUVD-2023-0310GHSA-2x48-p6cq-5xcwGO-2023-1509
Path Traversal in github.com/go-sonic/sonic
Published Jan 23, 2023 · Updated Apr 3, 2025 · Assigned by mitre