-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe commit diff shows the vulnerability was in the filename construction logic within pasteHandler. The original code directly joined user-controlled r.URL.Path with the storage directory without proper sanitization. The patch added path.Clean and filepath.FromSlash to neutralize traversal sequences. Multiple sources (CVE description, GHSA, and commit message) explicitly attribute the vulnerability to this function's handling of r.URL.Path.
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/jessfraz/pastebinit | go | < 0.2.3 | 0.2.3 |
Ongoing coverage of React2Shell