1 matches found
Echo Has A Static Middleware Double-Unescape Path Traversal
Summary Commit a9ede66a PR 3006, issue 2599 silently fixed a path traversal vulnerability in the Echo web framework's static file middleware. Vulnerability The static middleware double-unescaped URL paths. Go's net/http already decodes Request.URL.Path, but middleware/static.go unconditionally...
5.9CVSS5.9AI score0.00303EPSS
SaveExploits0References7Affected Software2
20