What is CVE-2022-23531?

CVE-2022-23531 is a medium-severity vulnerability in Datadog Guarddog, classified under Relative Path Traversal. CVSS score: 5.8/10. Published 2022-12-16.

How severe is CVE-2022-23531?

Medium severity. CVSS v3 base score is 5.8 out of 10.

Path Traversal in Datadog Guarddog

CVE-2022-23531

GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to 0.1.5 are vulnerable to Relative Path Traversal when scanning a specially-crafted local PyPI package. Running GuardDog against a specially-crafted package can al…

EPSS: 0.002 (43.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L.

Affected products

Datadog Guarddog — versions < 0.1.5

Weakness classification (CWE)

CWE-23 — Relative Path Traversal

References

https://github.com/DataDog/guarddog/security/advisories/GHSA-rp2v-v467-q9vq (x_refsource_CONFIRM)
https://github.com/DataDog/guarddog/pull/89/commits/a56aff58264cb6b7855d71b00dc10c39a5dbd306 (x_refsource_MISC)
https://github.com/DataDog/guarddog/releases/tag/v0.1.5 (x_refsource_MISC)

Frequently asked questions

What is CVE-2022-23531?: CVE-2022-23531 is a medium-severity vulnerability in Datadog Guarddog, classified under Relative Path Traversal. CVSS score: 5.8/10. Published 2022-12-16.
How severe is CVE-2022-23531?: Medium severity. CVSS v3 base score is 5.8 out of 10.