CVE-2020-36559

Due to improper santization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.
References
Configurations

Configuration 1

cpe:2.3:a:aahframework:aah:*:*:*:*:*:go:*:*

Information

Published : 2022-12-27 10:15

Updated : 2023-01-06 04:58


NVD link : CVE-2020-36559

Mitre link : CVE-2020-36559

Products Affected
No products.
CWE