cve/2019/CVE-2019-25073.md

### [CVE-2019-25073](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25073)
![](https://img.shields.io/static/v1?label=Product&message=github.com%2Fgoadesign%2Fgoa&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=goa.design%2Fgoa%2Fv3&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=goa.design%2Fgoa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%201.4.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%203.0.9%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory('Path%20Traversal')&color=brighgreen)

### Description

Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Live-Hack-CVE/CVE-2019-25073