Astra Linux – Vulnerability in golang-github-emicklei-go-restful

Authorization bypass through user-controlled keys in the GitHub repository in the emicklei/go-restful library, prior to version 3.8.0...

The vulnerability of the go-restful web service creation software lies in its ability to bypass authentication using a user-controlled key, allowing users to elevate their privileges.

The vulnerability of the go-restful web service creation software relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to increase their privileges remotely...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key which is capable of breaking CORS policy and allowing any page to make requests, and retrieve data on behalf of other users. Remediation Upgrade github.com/emicklei/go-restful to version...