PT-2022-3324

Name of the Vulnerable Software and Affected Versions go-restful versions prior to v3.8.0 Description The issue is related to an authorization bypass through a user-controlled key. This could allow a remote attacker to elevate their privileges. The vulnerability is also related to CORS filters th...

CVE-2022-1996 Authorization Bypass Through User-Controlled Key in emicklei/go-restful

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...

CVE-2022-1996

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...

Authorization Bypass Through User-Controlled Key

Description Hello go restful maintainer team, I would like to report a security concerning your CORS Filter feature. Go restful allows user to specify a CORS Filter with a configurable AllowedDomains param - which is an array of domains allowed in CORS policy. However, although there's is already...