Lucene search
+L

98 matches found

Positive Technologies
Positive Technologies
•added 2022/12/25 12:00 a.m.•7 views

PT-2022-9022 · Unknown +1 · Macaron I18N +1

Name of the Vulnerable Software and Affected Versions: Macaron i18n versions prior to 0.5.0 Description: A vulnerability was found in Macaron i18n, affecting an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. A user-controll...

6.1CVSS5.7AI score0.00591EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/25 12:00 a.m.•1 views

CVE-2020-36627: URL Redirection to Untrusted Site

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS5.2AI score0.00591EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/25 12:00 a.m.•23 views

i18n 输入验证错误漏洞

i18n is a Macaron open source package . It provides internationalization and localization middleware for Macaron applications. An input validation error vulnerability exists in versions of i18n prior to 0.5.0, which stems from a problem with an unknown function in the file i18n.go that results in...

6.1CVSS5.6AI score0.00591EPSS
SaveExploits0References5
OSV
OSV
•added 2022/02/15 1:57 a.m.•21 views

GHSA-HF6F-JQ25-8GQ9 Gitea Remote Code Execution (RCE)

Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron...

9.8CVSS9.8AI score0.03041EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
•added 2022/02/15 12:00 a.m.•29 views

Session Fixation

Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron...

9.8CVSS3.5AI score0.03041EPSS
SaveExploits0References5Affected Software1
Packet Storm
Packet Storm
•added 2021/06/04 12:00 a.m.•167 views

Macaron Notes Great Notebook 5.5 Denial Of Service

Exploit Title: Macaron Notes great notebook 5.5 - Denial of Service PoC Date: 06-04-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/macaron-notes-great-notebook/id1079862221 Version: 5.5 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a lo...

SaveExploits0
OSV
OSV
•added 2021/05/18 9:08 p.m.•40 views

GHSA-733F-44F3-3FRW gopkg.in/macaron.v1 Open Redirect vulnerability

macaron before 1.3.7 has an open redirect in the static handler. Due to improper request santization, a specifically crafted URL can cause the static file handler to redirect to an attacker chosen URL, allowing for open redirect attacks...

6.1CVSS6.1AI score0.0141EPSS
SaveExploits1References10
Github Security Blog
Github Security Blog
•added 2021/05/18 9:08 p.m.•79 views

gopkg.in/macaron.v1 Open Redirect vulnerability

macaron before 1.3.7 has an open redirect in the static handler. Due to improper request santization, a specifically crafted URL can cause the static file handler to redirect to an attacker chosen URL, allowing for open redirect attacks...

6.1CVSS6AI score0.0141EPSS
SaveExploits1References10Affected Software1
OpenVAS
OpenVAS
•added 2021/01/11 12:00 a.m.•33 views

Fedora: Security Advisory for golang-gopkg-macaron-1 (FEDORA-2020-66e6e8d027)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS7.1AI score0.0141EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/01/04 12:00 a.m.•32 views

Fedora 32 : golang-gopkg-macaron-1 (2020-66e6e8d027)

Update to 1.4.0 Security fix for CVE-2020-12666 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

6.1CVSS6.1AI score0.0141EPSS
SaveExploits1References2
Fedora
Fedora
•added 2021/01/01 1:25 a.m.•104 views

[SECURITY] Fedora 32 Update: golang-gopkg-macaron-1-1.4.0-1.fc32

Package Macaron is a high productive and modular web framework in Go...

6.1CVSS1.5AI score0.0141EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2020/08/07 12:00 a.m.•58 views

RHEL 7 / 8 : Red Hat OpenShift Service Mesh (RHSA-2020:3369)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3369 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

7.5CVSS6.6AI score0.84887EPSS
SaveExploits15References13
RedHat Linux
RedHat Linux
•added 2020/08/06 8:19 p.m.•25 views

macaron: open redirect in the static handler

A flaw was found in macaron. Path URLs aren't cleaned before being redirected creating an open redirect in the static handler...

6.1CVSS6.2AI score0.0141EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2020/06/23 12:56 p.m.•28 views

CVE-2020-12666

A flaw was found in macaron. Path URLs aren't cleaned before being redirected creating an open redirect in the static handler...

5.8CVSS1.2AI score0.0141EPSS
SaveExploits1References3
Veracode
Veracode
•added 2020/05/08 6:12 a.m.•19 views

Open Redirection

github.com/go-macaron/macaron is vulnerable to open redirection. Lack of validation of the path URL allows a remote attacker to redirect users to a malicious site to steal user credentials...

6.1CVSS5.1AI score0.0141EPSS
SaveExploits1References6Affected Software8
CNVD
CNVD
•added 2020/05/06 12:00 a.m.•11 views

macaron input validation error vulnerability

macaron is a modular Web framework based on the Go language . An input validation error vulnerability exists in the static handler in versions prior to macaron 1.3.7. The vulnerability stems from a web system or product that does not properly validate input data. No detailed vulnerability details...

6.1CVSS6.9AI score0.0141EPSS
SaveExploits1References1
NVD
NVD
•added 2020/05/05 10:15 p.m.•34 views

CVE-2020-12666

macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL...

6.1CVSS6.5AI score0.0141EPSS
SaveExploits1References3
OSV
OSV
•added 2020/05/05 10:15 p.m.•31 views

CVE-2020-12666

macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL...

6.1CVSS6.7AI score
SaveExploits0References3
Prion
Prion
•added 2020/05/05 10:15 p.m.•20 views

Open redirect

macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL...

5.8CVSS6.3AI score0.0141EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
•added 2020/05/05 9:06 p.m.•67 views

CVE-2020-12666

macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL...

6.3AI score0.0141EPSS
SaveExploits1References3
Rows per page
Query Builder