Lucene search
+L

2 matches found

OSV
OSV
added 2023/05/12 8:19 p.m.90 views

GHSA-2C4M-59X9-FR2G Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function

The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of...

4.3CVSS4.6AI score0.00486EPSS
SaveExploits2References6
Github Security Blog
Github Security Blog
added 2023/05/12 8:19 p.m.81 views

Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function

The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of...

4.3CVSS6.3AI score0.00486EPSS
SaveExploits2References6Affected Software1
Rows per page
Query Builder