CVE-2022-30630

CVE-2022-30630 details an uncontrolled recursion vulnerability in the Glob function of Go's io/fs package, affecting versions prior to Go 1.17.12 and Go 1.18.4. An attacker can exploit this by providing a path with a large number of separators, leading to stack exhaustion and a denial of service. Rated with a CVSS score of 7.5 (High), it presents a network attack vector with low complexity, allowing an unauthenticated actor to cause a high impact on availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage for this vulnerability.