What’s Vulnerable › Vulnerabilities

CVE-2022-23082: CureKit - Path Traversal in isFileOutsideDir

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-31 · updated 2026-06-17
• Weakness: CWE-22

Description

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.

Affected products

• WhiteSource CureKit: from 1.0.1 through 1.1.3

References

• https://github.com/whitesource/CureKit/commit/af35e870ed09411d2f1fae6db1b04598cd1a31b6
• https://www.mend.io/vulnerability-database/CVE-2022-23082
• https://github.com/whitesource/CureKit/commit/af35e870ed09411d2f1fae6db1b04598cd1a31b6
• https://www.mend.io/vulnerability-database/CVE-2022-23082

Get alerted when CVE-2022-23082 or the next vulnerability affects your stack