Lucene search
K

23 matches found

OSV
OSV
added 2026/02/26 4:27 p.m.3 views

GO-2026-4502 Echo has a Windows path traversal via backslash in middleware.Static default filesystem in github.com/labstack/echo/v5

Echo has a Windows path traversal via backslash in middleware.Static default filesystem in github.com/labstack/echo/v5...

5.3CVSS5.5AI score0.00068EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/22 11:37 p.m.1 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS9.2AI score0.58765EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2022-40083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers...

9.6CVSS7.3AI score0.58765EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2022/12/07 5:15 p.m.27 views

CVE-2020-36565

Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read...

5.3CVSS6.1AI score0.00295EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/12/07 4:14 p.m.12 views

CVE-2020-36565 Directory traversal on Windows in github.com/labstack/echo/v4

Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read...

5.1AI score0.00295EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/12/07 12:0 a.m.1 views

labstack echo 路径遍历漏洞

labstack echo is the high-performance, minimalist Go Web framework. A security vulnerability exists in the previous version of labstack echo v4.1.18-0.20201215153152-4422e3b66b9f, which stems from incorrect cleanup of user input on Windows, where the static file handler allows for directory...

5.3CVSS5.7AI score0.00295EPSS
Exploits1References4
OSV
OSV
added 2022/10/11 9:29 p.m.21 views

GO-2022-1031 Open redirect in github.com/labstack/echo/v4

Labstack Echo contains an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS9.1AI score0.58765EPSS
Exploits1References2
Veracode
Veracode
added 2022/10/03 3:18 a.m.17 views

Server-Side Request Forgery (SSRF)

github.com/labstack/echo is vulnerable to server side request forgery. The vulnerability exists due to a lack of sanitization of URL via the Static Handler component allowing an attacker to redirect a user to a malicious website...

9.6CVSS8.7AI score0.58765EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/09/29 12:0 a.m.21 views

GHSA-CRXJ-HRMP-4RWF Labstack Echo Open Redirect vulnerability

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF. Version 4.9.0 contains a patch for the issue...

9.6CVSS9.2AI score0.58765EPSS
Exploits1References8
Github Security Blog
Github Security Blog
added 2022/09/29 12:0 a.m.95 views

Labstack Echo Open Redirect vulnerability

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF. Version 4.9.0 contains a patch for the issue...

9.6CVSS8.9AI score0.58765EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2022/09/28 2:15 p.m.14 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS9.3AI score
Exploits0References1
NVD
NVD
added 2022/09/28 2:15 p.m.8 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS0.58765EPSS
Exploits1References1
OSV
OSV
added 2022/09/28 2:15 p.m.3 views

DEBIAN-CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS8.4AI score0.58765EPSS
Exploits1References1
Prion
Prion
added 2022/09/28 2:15 p.m.20 views

Open redirect

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

6.8CVSS9.1AI score0.58765EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2022/09/28 2:15 p.m.37 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS7.2AI score0.58765EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2022/09/28 1:34 p.m.10 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.6CVSS9.3AI score0.58765EPSS
Exploits1
Cvelist
Cvelist
added 2022/09/28 1:34 p.m.209 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.5AI score0.58765EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/09/28 1:34 p.m.4 views

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...

9.3AI score0.58765EPSS
Exploits1References1
CVE
CVE
added 2022/09/28 1:34 p.m.107 views

CVE-2022-40083

Labstack Echo v4.8.0 contains an open redirect vulnerability via the Static Handler component that can be exploited to cause Server-Side Request Forgery (SSRF). Affected software: Labstack Echo 4.8.0. Root cause: open redirect in Static Handler allows redirection to arbitrary URLs, enabling SSRF....

9.6CVSS9.1AI score0.58765EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/28 12:0 a.m.2 views

PT-2022-7187 · Labstack +1 · Labstack Echo +1

Name of the Vulnerable Software and Affected Versions: Labstack Echo version 4.8.0 Description: The issue is related to an open redirect vulnerability via the Static Handler component, which can be leveraged by attackers to cause a Server-Side Request Forgery SSRF. This allows a remote attacker t...

10CVSS9.1AI score0.58765EPSS
Exploits1References20
Rows per page
Query Builder