golang-github-gin-gonic-gin

4 results · Feed

• Medium 4.3
  CVE-2023-29401 Public exploit

  Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin

  The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. F…

  github.com/gin-gonic/gin github.com/gin-gonic/gin github.com/gin-gonic/gin golang-github-gin-gonic-gin Debian Ubuntu Go
  Jun 8, 2023
• Medium 5.6
  CVE-2023-26125

  Improper input validation in github.com/gin-gonic/gin

  Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. **Note:** Although …

  github.com/gin-gonic/gin golang-github-gin-gonic-gin golang-github-gin-gonic-gin Debian Ubuntu Go
  May 4, 2023
• High 7.5
  CVE-2020-36567

  Arbitrary log line injection in github.com/gin-gonic/gin

  Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.

  github.com/gin-gonic/gin github.com/gin-gonic/gin github.com/gin-gonic/gin golang-github-gin-gonic-gin Debian Ubuntu Go
  Dec 27, 2022
• High 7.1
  CVE-2020-28483

  HTTP Response Splitting

  This affects all versions of package github.com/gin-gonic/gin. When gin is exposed directly to the internet, a client's IP can be spoofed by setting the X-Forwarded-For header.

  github.com/gin-gonic/gin golang-github-gin-gonic-gin golang-github-gin-gonic-gin Debian Ubuntu Go
  Jan 20, 2021