CVE-2018-25059

Katalog CVE

CVSS 5.3 · Medium EPSS 0,80%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada pastebinit project pastebinit. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in pastebinit up to 0.2.2 and classified as problematic. Affected by this issue is the function pasteHandler of the file server.go. The manipulation of the argument r.URL.Path leads to path traversal. Upgrading to version 0.2.3 is able to address this issue. The name of the patch is 1af2facb6d95976c532b7f8f82747d454a092272. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217040.

Rincian

Terbit di NVD

30 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

0,80% peluang dieksploitasi; lebih tinggi dari 55,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jessfraz/pastebinit/commit/1af2facb6d95976c532b7f8f82747d454a092272 patch · advisory pihak ketiga
• https://github.com/jessfraz/pastebinit/pull/3 issue tracking · patch · advisory pihak ketiga
• https://github.com/jessfraz/pastebinit/releases/tag/v0.2.3 release notes · advisory pihak ketiga
• https://vuldb.com/?ctiid.217040 advisory pihak ketiga
• https://vuldb.com/?id.217040 advisory pihak ketiga