CVE-2021-45232

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

PT-2021-12082 · Gin · Gin-Gonic/Gin

Name of the Vulnerable Software and Affected Versions: gin-gonic/gin versions prior to 1.6.0 Description: The issue allows remote attackers to inject arbitrary log lines due to unsanitized input in the default logger. This can be achieved by manipulating the request path, which affects the defaul...

Gin-Gonic Gin Environmental Vulnerabilities

Gin-Gonic Gin is a Go-based framework for rapidly building web applications from the Gin-Gonic team. github.com/gin-gonic/gin A security vulnerability exists in all versions, which stems from the ability to spoof a client's IP by setting the X-Forwarded-For header...

HTTP Response Splitting

Overview github.com/gin-gonic/gin is a package that implements a HTTP web framework called gin. Affected versions of this package are vulnerable to HTTP Response Splitting. When gin is exposed directly to the internet, a client's IP can be spoofed by setting the X-Forwarded-For header. Remediatio...