Cloudwego

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Cloudwego records in CISA KEV

No Cloudwego vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Hertz · all components

TI-2022-18980 CVE-2022-40082 · GHSA-c9qr-f6c8-rgxf

HIGH 72

Hertz v0.3.0 ws discovered to contain a path traversal vulnerability via the normalizePath function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01111 Published 2022-09-28 Fixed in 0.3.1 CWE-22