CVE:CVE-2023-28105
CNNVD:CNNVD-202303-1342
go-huge-util是Go 常用实用函数。
go-huge-util 0.0.34之前版本存在路径遍历漏洞。攻击者利用该漏洞可以访问存储在web根文件夹之外的文件和目录。
solution:Upgrade go-huge-util_project go-huge-util to a higher version than 0.0.34,and avoid the version (,0.0.34)