Описание
Duplicate Advisory: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-528q-4pgm-wvg2. This link is maintained to preserve external references.
Original Description
A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Пакеты
Наименование
github.com/mccutchen/go-httpbin/v2
go
Затронутые версииВерсия исправления
< 2.18.0
2.18.0
Наименование
github.com/mccutchen/go-httpbin
go
Затронутые версииВерсия исправления
<= 1.1.1
Отсутствует
1.3 Low
CVSS4
Дефекты
CWE-79
1.3 Low
CVSS4
Дефекты
CWE-79