CVE-2022-47747 - kraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs

HIGH

kraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs

Published Jan 20, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.80%

kraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs.

Ecosystem	Package	Introduced	Fixed
Go	github.com/uber/kraken	0	not fixed

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://github.com/advisories/GHSA-hj4g-4w36-x8hp		Advisory
https://github.com/uber/kraken/issues/333		ExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-47747

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 20, 2023

Updated Apr 3, 2025

Reserved Dec 21, 2022

Updated Apr 3, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a