Executive brief
Directory traversal in manifest path extraction in github.com/cloudflare/cfrpki
Affected products
- Go github.com/cloudflare/cfrpki
Junglewise Threat Intelligence
CVE-2021-3907: GO-2022-0248 - Directory traversal in manifest path extraction in github.com/cloudflare/cfrpki
CVE-2021-3907 · Severity: low · CVSS 3.1 · Published 2022-07-15
Technologies: github.com/cloudflare/cfrpki (Go). Vendors: Go.
Related threats
- GO-2022-1089 - OctoRPKI crashes when max iterations is reached in github.com/cloudflare/cfrpki
- GO-2022-0580 - Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki in github.com/cloudflare/cfrpki
- GO-2022-0496 - Path traversal mitigation bypass in OctoRPKI in github.com/cloudflare/cfrpki
- GO-2022-0250 - Infinite open connection causes OctoRPKI to hang forever in github.com/cloudflare/cfrpki
- GO-2022-0249 - Infinite certificate chain depth results in OctoRPKI running forever in github.com/cloudflare/cfrpki