Lucene search
+L

1 matches found

OSV
OSV
added 2024/04/17 3:34 p.m.9 views

GO-2024-2730 WITHDRAWN: Directory traversal in FilesystemStore in github.com/gorilla/sessions

This report has been withdrawn on the grounds that it generates too many false positives. Session IDs are documented as not being suitable to hold user-provided data. FilesystemStore does not sanitize the Session.ID value, making it vulnerable to directory traversal attacks. If an attacker has...

10CVSS9.7AI score0.99999EPSS
SaveExploits44References1
Rows per page
Query Builder