← voltar
CVE-2020-36567

Arbitrary log line injection in github.com/gin-gonic/gin

CVSS 7.5 HIGHEPSS 1.4%
Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
github.com/gin-gonic/gin · github.com/gin-gonic/gin

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/gin-gonic/gin/commit/a71af9c144f9579f6dbe945341c1df37aaf09c0dhttps://github.com/gin-gonic/gin/pull/2237https://pkg.go.dev/vuln/GO-2020-0001