Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/02/17 6:53 p.m.•23 views

Echo has a Windows path traversal via backslash in middleware.Static default filesystem

Summary On Windows, Echo’s middleware.Static using the default filesystem allows path traversal via backslashes, enabling unauthenticated remote file read outside the static root. Details In middleware/static.go, the requested path is unescaped and normalized with path.Clean URL semantics...

5.3CVSS8.1AI score0.00449EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder