Skip to content
OpenAdvisories

Package · Go

github.com/zeromicro/go-zero

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-27302

    Authorization Bypass Through User-Controlled Key in go-zero

    go-zero is a web and rpc framework. Go-zero allows user to specify a CORS Filter with a configurable allows param - which is an array of domains allowed in CORS policy. However, the `isOriginAllowed` uses `strings.HasSuffix` to check the origin, which leads t…

    zeromicro go-zero github.com/zeromicro/go-zero Go