Path traversal on Windows in path/filepath

CVE-2022-41722

What is CVE-2022-41722?

A path traversal vulnerability exists in the filepath.Clean function on Windows platforms. This function improperly validates paths, allowing potentially malicious input to be transformed into accessible absolute paths. Specifically, it can convert an invalid path such as 'a/../c:/b' into 'c:\b', facilitating unauthorized access to directories. Post-fix improvements ensure that invalid paths are not converted into absolute paths, hence mitigating the risk of such directory traversal attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References