Описание
An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-github-go-chi-chi | fixed | 5.2.5-1 | package | |
| golang-github-go-chi-chi | not-affected | trixie | package | |
| golang-github-go-chi-chi | not-affected | bookworm | package | |
| golang-github-go-chi-chi | not-affected | bullseye | package |
Примечания
https://github.com/go-chi/chi/security/advisories/GHSA-mqqf-5wvp-8fh8
EPSS
Связанные уязвимости
An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain.
An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain.
An Open Redirect vulnerability in the go-chi/chi >=5.2.2 RedirectSlashes function allows remote attackers to redirect victim users to malicious websites using the legitimate website domain.
chi has an open redirect vulnerability in the RedirectSlashes middleware
EPSS