Executive brief
Gin mishandles a wildcard in the origin string in github.com/gin-contrib/cors
Affected products
- Go github.com/gin-contrib/cors
- Go github.com/gin-gonic/gin
Junglewise Threat Intelligence
CVE-2019-25211: GO-2024-2955 - Gin mishandles a wildcard in the origin string in github.com/gin-contrib/cors
CVE-2019-25211 · Severity: low · CVSS 3.1 · Published 2024-07-02
Technologies: github.com/gin-gonic/gin (Go). Vendors: Go.
Related threats
- GO-2023-1737 - Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin
- Improper input validation in github.com/gin-gonic/gin
- GO-2020-0001 - Arbitrary log line injection in github.com/gin-gonic/gin
- GO-2020-0029 - Due to improper HTTP header santization, a malicious user can spoof their source IP address by setting the X-Forwarded-For header. This may
- GO-2021-0052 - Inconsistent interpretation of HTTP Requests in github.com/gin-gonic/gin