Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2019-25073

Path traversal in github.com/goadesign/goa

Description

Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

github.com/goadesign/goa github.com/goadesign/goa

Default version status: unaffected

  • 0 to < 1.4.3affected

goa.design/goa goa.design/goa

Default version status: unaffected

  • 0 to < 1.4.3affected

goa.design/goa/v3 goa.design/goa/v3

Default version status: unaffected

  • 0 to < 3.0.9affected

References