Approved changes feed: RSS · Atom

cpe:2.3:a:go-fastdfs_project:go-fastdfs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGo Fastdfs Project (7d3dac80-450d-5330-8856-17e5915ac92f)
ProductGo Fastdfs (831e44e3-b5fb-5e7e-95c2-3e975bde39d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gitee/sjqzhang/go-fastdfs purl2cpe 2026-06-01 10:12:51.695115
pkg:github/sjqzhang/go-fastdfs purl2cpe 2026-06-01 10:12:51.695118
pkg:golang/gitee.com/sjqzhang/go-fastdfs purl2cpe 2026-06-01 10:12:51.695121
pkg:golang/github.com/sjqzhang/go-fastdfs purl2cpe 2026-06-01 10:12:51.695124

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1800 vulnerable 2026-06-08 05:52:37.060672 sjqzhang go-fastdfs File Upload uploa upload path traversal
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in sjqzhang go-fastdfs up to 1.4.3. Affected by this issue is the function upload of the file /group1/uploa of the component File Upload Handler. The manipulation leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224768.
Published: 2023-04-02T10:31:03.341Z
Updated: 2024-11-22T21:40:19.685Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.