Lucene search
K

4 matches found

OSV
OSV
added 2025/05/27 8:47 p.m.2 views

GO-2025-3706 Fiber panics when fiber.Ctx.BodyParser parses invalid range index in github.com/gofiber/fiber

Fiber panics when fiber.Ctx.BodyParser parses invalid range index in github.com/gofiber/fiber...

8.7CVSS7.1AI score0.00472EPSS
Exploits1References2
OSV
OSV
added 2023/10/24 4:57 p.m.18 views

GO-2023-2116 CSRF token validation vulnerability in github.com/gofiber/fiber/v2

A cross-site request forgery vulnerability can allow an attacker to obtain tokens and forge malicious requests on behalf of a user. This can lead to unauthorized actions being taken on the user's behalf, potentially compromising the security and integrity of the application. The vulnerability is...

8.8CVSS8.5AI score0.00119EPSS
Exploits0References3
OSV
OSV
added 2023/10/24 4:57 p.m.26 views

GO-2023-2115 CSRF token reuse vulnerability in github.com/gofiber/fiber/v2

A cross-site request forgery vulnerability in this package can allow an attacker to inject arbitrary values and forge malicious requests on behalf of a user. The attacker may inject arbitrary values without any authentication, or perform various malicious actions on behalf of an authenticated use...

10CVSS9.2AI score0.00155EPSS
Exploits0References3
Veracode
Veracode
added 2023/10/18 6:45 a.m.18 views

Cross-Site Request Forgery (CSRF)

github.com/gofiber/fiber is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is caused by improper validation and enforcement of CSRF tokens within the application. An attacker is able to trick a user into performing unauthorized actions on the application, such as changing their...

8.8CVSS6.9AI score0.00119EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder