CVE-2019-18923

2019-11-1322:15:12

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

Insufficient content type validation of proxied resources in go-camo before 2.1.1 allows a remote attacker to serve arbitrary content from go-camo’s origin.

CPENameOperatorVersion
go-camoeq1.0.5
go-camoeq0.4.0
go-camoeq1.0.13
go-camoeq1.1.3
go-camoeq1.0.18
go-camoeq1.0.6
go-camoeq0.0.1
go-camoeq0.3.0
go-camoeq0.0.4
go-camoeq2.1.0