Executive brief
Hop-by-hop abuse to malform header mutator
Affected products
- Go github.com/ory/oathkeeper
Junglewise Threat Intelligence
Hop-by-hop abuse to malform header mutator
Severity: info ยท Published 2023-04-26
Technologies: github.com/ory/oathkeeper (Go). Vendors: Go.
Related threats
- GO-2026-4804 - Ory Oathkeeper has a path traversal authorization bypass in github.com/ory/oathkeeper
- GO-2026-4810 - Ory Oathkeeper has an authentication bypass by usage of untrusted header in github.com/ory/oathkeeper
- GO-2026-4799 - Ory Oathkeeper has an authentication bypass by cache key confusion in github.com/ory/oathkeeper
- GO-2022-0920 - Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper
- GO-2022-0406 - Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper