Executive brief
Due to improper input validation when uploading a file, a malicious user may force the server to return arbitrary HTTP headers when the uploaded file is downloaded.
Affected products
- Go github.com/gofiber/fiber
Junglewise Threat Intelligence
GO-2021-0091 - Due to improper input validation when uploading a file, a malicious user may force the server to return arbitrary HTTP headers when the uplo
Severity: info · Published 2021-04-14
Technologies: github.com/gofiber/fiber (Go). Vendors: Go.
Related threats
- Gofiber Fiber HSTS header omission in helmet middleware
- GO-2026-4471 - Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() on crypto/rand failure in github.com/gofiber/fiber
- GO-2025-3706 - Fiber panics when fiber.Ctx.BodyParser parses invalid range index in github.com/gofiber/fiber
- GO-2024-2959 - Session Middleware Token Injection Vulnerability in github.com/gofiber/fiber
- GO-2023-2052 - IsFromLocal local address check can be circumvented in github.com/gofiber/fiber/v2