CVE-2020-36568 Resource exhaustion in github.com/revel/revel

2022-12-2721:12:40

www.cve.org

github

revel

resource exhaustion

memory allocation

remote attackers

unsanitized input

query parser

0.005 Low

EPSS

Percentile

77.4%

JSON

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation.

CNA Affected

[
  {
    "vendor": "github.com/revel/revel",
    "product": "github.com/revel/revel",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "github.com/revel/revel",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.0.0",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]