Lucene search
GoogleOSV:GHSA-927H-X4QJ-R242HistoryMay 14, 2022 - 1:33 a.m.
github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error
2022-05-1401:33:06
Google
osv.dev
2
0.001 Low
EPSS
Percentile
48.8%
The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/gofiber/fiber/v2 | lt | 2.43.0 | |
| github.com/gofiber/fiber/v2 | ge | 2.0.0 |
References
Related
osv
osv
CVE-2018-20744
2019-01-28 08:29:00
Insecure wildcard CORS policy in github.com/rs/cors
2023-06-08 18:30:06
github
github
github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error
2022-05-14 01:33:06
nvd
nvd
CVE-2018-20744
2019-01-28 08:29:00
prion
prion
Code injection
2019-01-28 08:29:00
cvelist
cvelist
CVE-2018-20744
2019-01-28 08:00:00
cve
cve
CVE-2018-20744
2019-01-28 08:29:00
veracode
veracode
Insecure CORS Defaults
2019-01-29 01:10:29