Arbitrary File Write
CVE-2021-23772

7.5HIGH

Key Information:

Vendor: Iris-go
Status: Github.com/kataras/iris; Github.com/kataras/iris/v12
Vendor: CVE Published:; 24 December 2021

What is CVE-2021-23772?

This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch