CVE-2020-12666

macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL...

CVE-2020-12666

CVE-2020-12666 is an open redirect in the macaron web framework (gopkg.in/macaron.v1) — specifically in the static handler. The root cause is improper request sanitization, allowing a crafted URL to redirect to an attacker-chosen URL. Remediation documented across sources: upgrade to macaron 1.3....

URL Redirection to Untrusted Site (Open Redirect)

macaron before has an open redirect in the static handler...

PT-2020-13193 · Macaron · Macaron

Name of the Vulnerable Software and Affected Versions: macaron versions prior to 1.3.7 Description: The issue is related to an open redirect in the static handler due to improper request sanitization. This allows a specifically crafted URL to cause the static file handler to redirect to an...

CVE-2020-12666: URL Redirection to Untrusted Site

macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL...

PT-2019-14240

Name of the Vulnerable Software and Affected Versions Swoole versions prior to 4.2.13 Description The issue allows directory traversal in the swPort http static handler. Recommendations For versions prior to 4.2.13, update to version 4.2.13 or later to resolve the issue...