Lucene search
+L

90 matches found

Cvelist
Cvelist
added 2022/12/30 11:47 a.m.43 views

CVE-2018-25060 Macaron csrf csrf.go missing secure attribute

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of a...

3.7CVSS7.5AI score0.00515EPSS
SaveExploits0References4
CVE
CVE
added 2022/12/30 11:47 a.m.107 views

CVE-2018-25060

CVE-2018-25060 affects the Macaron csrf component (go-macaron/csrf) via the csrf.go Generate path. Affects cookies created by Generate: the Secure attribute is not applied, allowing cookies to be sent over non-SSL connections. The vulnerability can be exploited remotely; the attack complexity is ...

7.5CVSS5.6AI score0.00515EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/30 12:00 a.m.5 views

PT-2022-8070 · Unknown +1 · Macaron Csrf +1

Name of the Vulnerable Software and Affected Versions: Macaron csrf affected versions not specified Description: A vulnerability was found in Macaron csrf, classified as problematic. It affects some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to...

7.5CVSS4.5AI score0.00515EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2022/12/30 12:00 a.m.10 views

Macaron csrf 安全漏洞

Macaron csrf is a Macaron open source middleware for generating and verifying csrf tokens for Macaron. Macaron csrf has a security vulnerability that stems from a misuse of the parameter Generate that results in a sensitive cookie without security attributes...

7.5CVSS5.5AI score0.00515EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2022/12/26 5:04 a.m.18 views

CVE-2020-36627

A flaw was found in Macaron i18n. The affected version of this package is vulnerable to open redirect attacks...

5.5CVSS4.7AI score0.00591EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/25 12:30 p.m.14 views

GHSA-JWRV-X6RX-8VFM Macaron i18n Open Redirect vulnerability

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 can address this issue. The name...

6.1CVSS5.8AI score0.00591EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/12/25 12:30 p.m.25 views

Macaron i18n Open Redirect vulnerability

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 can address this issue. The name...

6.1CVSS6.3AI score0.00591EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/12/25 11:15 a.m.7 views

DEBIAN-CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS4.4AI score0.00591EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/25 11:15 a.m.17 views

CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS6.3AI score
SaveExploits0References3
NVD
NVD
added 2022/12/25 11:15 a.m.18 views

CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS0.00591EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/25 11:15 a.m.7 views

UBUNTU-CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS4.8AI score0.00591EPSS
SaveExploits0References3
Prion
Prion
added 2022/12/25 11:15 a.m.15 views

Open redirect

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

5.8CVSS6.2AI score0.00591EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2022/12/25 11:15 a.m.17 views

CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS5.6AI score0.00591EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/25 10:19 a.m.85 views

CVE-2020-36627

CVE-2020-36627 affects Macaron i18n (i18n.go) where an open redirect is possible due to vulnerable functionality. The issue is exploitable remotely; upgrading to version 0.5.0 addresses it. The patch is identified by the commit 329b0c4844cc16a5a253c011b55180598e707735 (VDB-216745). Multiple sourc...

6.1CVSS5.8AI score0.00591EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/12/25 10:19 a.m.25 views

CVE-2020-36627 Macaron i18n i18n.go redirect

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

5.5CVSS6.2AI score0.00591EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2022/12/25 10:19 a.m.38 views

CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS5.6AI score0.00591EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/12/25 12:00 a.m.4 views

PT-2022-9022 · Unknown +1 · Macaron I18N +1

Name of the Vulnerable Software and Affected Versions: Macaron i18n versions prior to 0.5.0 Description: A vulnerability was found in Macaron i18n, affecting an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. A user-controll...

6.1CVSS5.7AI score0.00591EPSS
SaveExploits0References17
CNNVD
CNNVD
added 2022/12/25 12:00 a.m.15 views

i18n 输入验证错误漏洞

i18n is a Macaron open source package . It provides internationalization and localization middleware for Macaron applications. An input validation error vulnerability exists in versions of i18n prior to 0.5.0, which stems from a problem with an unknown function in the file i18n.go that results in...

6.1CVSS5.6AI score0.00591EPSS
SaveExploits0References5
OSV
OSV
added 2022/02/15 1:57 a.m.16 views

GHSA-HF6F-JQ25-8GQ9 Gitea Remote Code Execution (RCE)

Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron...

9.8CVSS9.8AI score0.02868EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2022/02/15 12:00 a.m.26 views

Session Fixation

Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron...

9.8CVSS3.5AI score0.02868EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder