Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-23772

Arbitrary File Write

Description

This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a github.com/kataras/iris

  • 0 to < unspecifiedaffected

n/a github.com/kataras/iris/v12

  • 0 to < unspecifiedaffected

References