Path traversal in CureKit

CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function `isFileOutsideDir` fails to sanitize the user input which may lead to path traversal.

Vulnerability ID: GHSA-m9vj-44f3-78xw
Aliases: CVE-2022-23082
Published: 2022-06-01 00:00:35
CWE: CWE-22
Severity rating: HIGH
CVSS: type: CVSS_V3
score: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected packages:
package: ecosystem: Maven
name: io.whitesource:curekit