Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:github.com/kataras/iris:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductGithub.Com/Kataras/Iris (0faa569a-b106-5f8e-ac23-f6b6139b712f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-23772 vulnerable 2026-06-08 05:30:03.061511 Arbitrary File Write
HIGH (7.5)
This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder.
Published: 2021-12-24T12:05:14.635Z
Updated: 2024-09-16T20:03:06.172Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.