Executive brief
Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin
Affected products
- Go github.com/gin-gonic/gin
Junglewise Threat Intelligence
CVE-2023-29401: GO-2023-1737 - Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin
CVE-2023-29401 · Severity: low · CVSS 3.1 · Published 2023-05-11
Technologies: github.com/gin-gonic/gin (Go). Vendors: Go.
Related threats
- GO-2024-2955 - Gin mishandles a wildcard in the origin string in github.com/gin-contrib/cors
- Improper input validation in github.com/gin-gonic/gin
- GO-2020-0001 - Arbitrary log line injection in github.com/gin-gonic/gin
- GO-2020-0029 - Due to improper HTTP header santization, a malicious user can spoof their source IP address by setting the X-Forwarded-For header. This may
- GO-2021-0052 - Inconsistent interpretation of HTTP Requests in github.com/gin-gonic/gin