Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8pjc-487g-w6p2

Опубликовано: 22 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

EPSS

Процентиль: 1%
0.00008
Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
ubuntu
5 месяцев назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

CVSS3: 5.4
nvd
5 месяцев назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

CVSS3: 5.4
debian
5 месяцев назад

When using http.CrossOriginProtection, the AddInsecureBypassPattern me ...

suse-cvrf
4 месяца назад

Security update for go1.25-openssl

suse-cvrf
4 месяца назад

Security update for go1.25-openssl

EPSS

Процентиль: 1%
0.00008
Низкий

5.4 Medium

CVSS3