CVE-2020-36559

Published: Dec 27, 2022

Modified: Apr 11, 2025

PUBLISHED

Description

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.

Vendor	Product	Versions
aahframe.work	aahframe.work	affected `0 - < 0.12.4`

References

https://github.com/go-aah/aah/pull/267

https://github.com/go-aah/aah/commit/881dc9f71d1f7a4e8a9a39df9c5c081d3a2da1ec

https://github.com/go-aah/aah/issues/266

https://pkg.go.dev/vuln/GO-2020-0033

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-36559

Description

Affected Products

References