Lucene search
Veracode Vulnerability DatabaseVERACODE:40459HistoryMay 10, 2023 - 4:23 a.m.
Cache Poisoning
2023-05-1004:23:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cache poisoning
github.com/gin-gonic/gin
redirecttrailingslash
special characters
header
x-forwarded-prefix
vulnerability
software
0.001 Low
EPSS
Percentile
38.7%
github.com/gin-gonic/gin is vulnerable to Cache Poisoning. The vulnerability exists in the redirectTrailingSlash function of gin.go as it does not properly escape special characters in the header, which allows an attacker to inject a malicious payload via the X-Forwarded-Prefix header.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/gin-gonic/gin | le | v1.8.2 | |
| github.com/gin-gonic/gin | le | v1.8.2 |
References
Related
cve
cve
CVE-2023-26125
2023-05-04 05:15:09
prion
prion
Input validation
2023-05-04 05:15:00
cvelist
cvelist
CVE-2023-26125
2023-05-04 05:00:01
ubuntucve
ubuntucve
CVE-2023-26125
2023-05-04 00:00:00
nvd
nvd
CVE-2023-26125
2023-05-04 05:15:09
github
github
Improper input validation in github.com/gin-gonic/gin
2023-05-04 06:30:12
osv
osv
Improper input validation in github.com/gin-gonic/gin
2023-05-04 06:30:12
debiancve
debiancve
CVE-2023-26125
2023-05-04 05:15:09
redhatcve
redhatcve
CVE-2023-26125
2023-05-15 08:51:35
redhat
redhat
