Lucene search
+L

26 matches found

OSV
OSV
•added 2026/09/22 1:33 p.m.•7 views

ROOT-APP-GOBINARY-CVE-2026-55677 CVE-2026-55677 in github.com/labstack/echo/v4 - Patched by Root

Root has patched CVE-2026-55677 in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

7.5CVSS5.8AI score0.00431EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•7 views

RockyLinux 9 : osbuild-composer (RLSA-2026:69293)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69293 advisory. golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-27136 golang.org/x/net/html:...

7.5CVSS6.3AI score0.00431EPSS
SaveExploits0References11
OSV
OSV
•added 2026/08/26 2:57 p.m.•10 views

GO-2026-6293 Encoded slash (%2F) bypasses route-level protection and exposes static files in github.com/labstack/echo/v4 and github.com/labstack/echo/v5

Encoded slash %2F bypasses route-level protection and exposes static files in github.com/labstack/echo/v4 and github.com/labstack/echo/v5...

7.5CVSS5.2AI score0.00431EPSS
SaveExploits0References8
OSV
OSV
•added 2026/02/26 4:27 p.m.•15 views

GO-2026-4502 Echo has a Windows path traversal via backslash in middleware.Static default filesystem in github.com/labstack/echo/v5

Echo has a Windows path traversal via backslash in middleware.Static default filesystem in github.com/labstack/echo/v5...

5.3CVSS5.5AI score0.00449EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/22 11:37 p.m.•8 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS9.2AI score0.03238EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2022-40083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers...

9.6CVSS8AI score0.03238EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2022/12/07 5:15 p.m.•36 views

CVE-2020-36565

Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read...

5.3CVSS6.1AI score0.01362EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/12/07 4:14 p.m.•29 views

CVE-2020-36565 Directory traversal on Windows in github.com/labstack/echo/v4

Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read...

5.1AI score0.01362EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/12/07 12:00 a.m.•15 views

labstack echo 路径遍历漏洞

labstack echo is the high-performance, minimalist Go Web framework. A security vulnerability exists in the previous version of labstack echo v4.1.18-0.20201215153152-4422e3b66b9f, which stems from incorrect cleanup of user input on Windows, where the static file handler allows for directory...

5.3CVSS5.7AI score0.01362EPSS
SaveExploits1References4
OSV
OSV
•added 2022/10/11 9:29 p.m.•33 views

GO-2022-1031 Open redirect in github.com/labstack/echo/v4

Labstack Echo contains an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS9.1AI score0.03238EPSS
SaveExploits1References2
Veracode
Veracode
•added 2022/10/03 3:18 a.m.•23 views

Server-Side Request Forgery (SSRF)

github.com/labstack/echo is vulnerable to server side request forgery. The vulnerability exists due to a lack of sanitization of URL via the Static Handler component allowing an attacker to redirect a user to a malicious website...

9.6CVSS8.7AI score0.03238EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2022/09/29 12:00 a.m.•107 views

Labstack Echo Open Redirect vulnerability

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF. Version 4.9.0 contains a patch for the issue...

9.6CVSS8.9AI score0.03238EPSS
SaveExploits1References8Affected Software1
OSV
OSV
•added 2022/09/29 12:00 a.m.•49 views

GHSA-CRXJ-HRMP-4RWF Labstack Echo Open Redirect vulnerability

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF. Version 4.9.0 contains a patch for the issue...

9.6CVSS9.2AI score0.03238EPSS
SaveExploits1References8
NVD
NVD
•added 2022/09/28 2:15 p.m.•31 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS0.03238EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/28 2:15 p.m.•71 views

DEBIAN-CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS8.4AI score0.03238EPSS
SaveExploits1References1
Prion
Prion
•added 2022/09/28 2:15 p.m.•31 views

Open redirect

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

6.8CVSS9.1AI score0.03238EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2022/09/28 2:15 p.m.•47 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS7.2AI score0.03238EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/09/28 1:34 p.m.•6 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.3AI score0.03238EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2022/09/28 1:34 p.m.•78 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS9.3AI score0.03238EPSS
SaveExploits1
CVE
CVE
•added 2022/09/28 1:34 p.m.•137 views

CVE-2022-40083

Labstack Echo v4.8.0 contains an open redirect vulnerability via the Static Handler component that can be exploited to cause Server-Side Request Forgery (SSRF). Affected software: Labstack Echo 4.8.0. Root cause: open redirect in Static Handler allows redirection to arbitrary URLs, enabling SSRF....

9.6CVSS9.1AI score0.03238EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder