title: Path traversal in github.com/goadesign/goa
description: Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory.
problem types: CWE-22: Improper Limitation of a Pathname to a Restricted Directory('Path Traversal')
affected:
{
vendor: github.com/goadesign/goa
product: github.com/goadesign/goa
collectionURL: https://pkg.go.dev
packageName: github.com/goadesign/goa
versions:
version: 0, lessThan: 1.4.3, status: affected, versionType: semver
programRoutines:
name: Controller.FileHandler
name: Service.ListenAndServe
name: Service.ListenAndServeTLS
name: Service.Serve
name: mux.ServeHTTP
defaultStatus: unaffected
}
{
vendor: goa.design/goa
product: goa.design/goa
collectionURL: https://pkg.go.dev
packageName: goa.design/goa
versions:
version: 0, lessThan: 1.4.3, status: affected, versionType: semver
programRoutines:
name: Controller.FileHandler
defaultStatus: unaffected
}
{
vendor: goa.design/goa/v3
product: goa.design/goa/v3
collectionURL: https://pkg.go.dev
packageName: goa.design/goa/v3
versions:
version: 0, lessThan: 3.0.9, status: affected, versionType: semver
programRoutines:
name: Controller.FileHandler
defaultStatus: unaffected
}
