Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8pjc-487g-w6p2

Опубликовано: 22 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

EPSS

Процентиль: 1%
0.00012
Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
ubuntu
2 месяца назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

CVSS3: 5.4
nvd
2 месяца назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

CVSS3: 5.4
debian
2 месяца назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern me ...

suse-cvrf
около 2 месяцев назад

Security update for go1.25-openssl

suse-cvrf
около 2 месяцев назад

Security update for go1.25-openssl

EPSS

Процентиль: 1%
0.00012
Низкий

5.4 Medium

CVSS3