Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8pjc-487g-w6p2

Опубликовано: 22 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

EPSS

Процентиль: 23%
0.00308
Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
ubuntu
10 месяцев назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

CVSS3: 5.4
redhat
10 месяцев назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

CVSS3: 5.4
nvd
10 месяцев назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

CVSS3: 5.4
debian
10 месяцев назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern me ...

suse-cvrf
10 месяцев назад

Security update for go1.25-openssl

EPSS

Процентиль: 23%
0.00308
Низкий

5.4 Medium

CVSS3