Goa · Goa · CVE-2019-25073
**Name of the Vulnerable Software and Affected Versions**
github.com/goadesign/goa versions prior to 3.0.9
github.com/goadesign/goa versions prior to 2.0.10
github.com/goadesign/goa versions prior to 1.4.3
**Description**
The issue is related to improper path sanitization, allowing remote attackers to read files outside of the intended directory due to insufficient sanitization of user input. This enables directory traversal, permitting an attacker to access files that the server has permission to read, outside of the target directory.
**Recommendations**
For versions prior to 3.0.9, update to version 3.0.9 or later.
For versions prior to 2.0.10, update to version 2.0.10 or later.
For versions prior to 1.4.3, update to version 1.4.3 or later.