Lucene search
+L

13 matches found

Cvelist
Cvelist
•added 2023/06/08 8:27 p.m.•48 views

CVE-2023-29401 Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin

The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of...

4.7AI score0.00482EPSS
SaveExploits2References4
Rows per page
Query Builder