CVE-2022-40083

Labstack Echo v4.8.0 contains an open redirect vulnerability via the Static Handler component that can be exploited to cause Server-Side Request Forgery (SSRF). Affected software: Labstack Echo 4.8.0. Root cause: open redirect in Static Handler allows redirection to arbitrary URLs, enabling SSRF....

CVE-2020-36565

CVE-2020-36565 corresponds to a directory-traversal vulnerability in the Windows environment within the static file handler of labstack/echo/v4. The root cause is improper sanitization of user input, allowing an attacker to read files outside the target directory that the server has permission to...