~ / search / GHSA-733f-44f3-3frw

GHSA-733f-44f3-3frw

gopkg.in/macaron.v1 Open Redirect vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-12666

Packages

EcosystemPackageAffectedFixed in
Go gopkg.in/macaron.v1 < 1.3.7 1.3.7

Details

As written in the advisory (Markdown source, shown as plain text).

macaron before 1.3.7 has an open redirect in the static handler. Due to improper request santization, a specifically crafted URL can cause the static file handler to redirect to an attacker chosen URL, allowing for open redirect attacks.

References

External links from the advisory. They lead to third-party sites.