CVE-2022-23082: Mend Curekit

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to path traversal.

Affected products

• Mend Curekit: from 1.0.1, up to and including 1.1.3

Published 2022-05-31. Last modified 2026-06-17.