Go/github.com/sjqzhang/go-fastdfs CVE-2023-1800: unknown, EPSS 3.55%
Path traversal in github.com/sjqzhang/go-fastdfs
Action: Upgrade github.com/sjqzhang/go-fastdfs to 1.4.5-0.20230408141131-61cbff5124c6 or later.
go get github.com/sjqzhang/go-fastdfs@v1.4.5-0.20230408141131-61cbff5124c6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.5-0.20230408141131-61cbff5124c6 | - |
Fixed versions
| 1.4.5-0.20230408141131-61cbff5124c6 |
Sources
- osv: GO-2023-1713
- https://github.com/yangyanglo/ForCVE/blob/93a16663cd32a36d37d8a0f0102e1592254d0279/2023-0x05.md
- https://vuldb.com/?ctiid.224768
- https://vuldb.com/?id.224768
- https://github.com/sjqzhang/go-fastdfs/commit/61cbff5124c61e292994099372b11c06cdb5b80b
- https://github.com/advisories/GHSA-xq3x-grrj-fj6x
CVE-2023-1800 · published · modified · JSON