Lucene search

K
osvGoogleOSV:GO-2021-0108
HistoryJul 28, 2021 - 6:08 p.m.

CRLF vulnerability in Fiber in github.com/gofiber/fiber

2021-07-2818:08:05
Google
osv.dev
16

0.001 Low

EPSS

Percentile

29.3%

Due to improper input sanitization, a maliciously constructed filename could cause a file download to use an attacker controlled filename, as well as injecting additional headers into an HTTP response.

CPENameOperatorVersion
github.com/gofiber/fiberlt1.12.6

0.001 Low

EPSS

Percentile

29.3%

Related for OSV:GO-2021-0108