Lucene search
GoogleOSV:GO-2022-1031HistoryOct 11, 2022 - 9:29 p.m.
Open redirect in github.com/labstack/echo/v4
2022-10-1121:29:24
Google
osv.dev
10
labstack echo
open redirect
static handler
vulnerability
ssrf
software
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
9.2 High
AI Score
Confidence
High
0.026 Low
EPSS
Percentile
90.3%
Labstack Echo contains an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/labstack/echo/v4 | lt | 4.9.0 |
Related
cvelist
cvelist
CVE-2022-40083
2022-09-28 13:34:03
github
github
Labstack Echo Open Redirect vulnerability
2022-09-29 00:00:26
osv
osv
Labstack Echo Open Redirect vulnerability
2022-09-29 00:00:26
CVE-2022-40083
2022-09-28 14:15:10
prion
prion
Open redirect
2022-09-28 14:15:00
nvd
nvd
CVE-2022-40083
2022-09-28 14:15:10
nuclei
nuclei
Labstack Echo 4.8.0 - Open Redirect
2022-10-07 16:11:42
cnvd
cnvd
LabStack Echo Open Redirect Vulnerability
2022-09-30 00:00:00
debiancve
debiancve
CVE-2022-40083
2022-09-28 14:15:10
cve
cve
CVE-2022-40083
2022-09-28 14:15:10
ubuntucve
ubuntucve
CVE-2022-40083
2022-09-28 00:00:00
veracode
veracode
Server-Side Request Forgery (SSRF)
2022-10-03 03:18:08
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
9.2 High
AI Score
Confidence
High
0.026 Low
EPSS
Percentile
90.3%
Related for OSV:GO-2022-1031