Executive brief
Path traversal mitigation bypass in OctoRPKI in github.com/cloudflare/cfrpki
Affected products
- Go github.com/cloudflare/cfrpki
Junglewise Threat Intelligence
GO-2022-0496 - Path traversal mitigation bypass in OctoRPKI in github.com/cloudflare/cfrpki
Severity: info ยท Published 2024-08-21
Technologies: github.com/cloudflare/cfrpki (Go). Vendors: Go.
Related threats
- GO-2022-1089 - OctoRPKI crashes when max iterations is reached in github.com/cloudflare/cfrpki
- GO-2022-0580 - Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki in github.com/cloudflare/cfrpki
- GO-2022-0250 - Infinite open connection causes OctoRPKI to hang forever in github.com/cloudflare/cfrpki
- GO-2022-0249 - Infinite certificate chain depth results in OctoRPKI running forever in github.com/cloudflare/cfrpki
- GO-2022-0253 - Resource exhaustion via GZIP bomb in github.com/cloudflare/cfrpki