CVE-2023-45289

🗓️ 05 Mar 2024 23:15:00Reported by ubuntu.comType

ubuntucve🔗 ubuntu.com👁 46 Views

HTTP redirect vulnerability in golang http.Client

Reporter	Title	Published	Views	Family All 1346
OSV	CGA-Q9CF-PG5H-F32M	30 Oct 202522:06	–	osv
OSV	CGA-QC83-WQR4-RH7M	30 Oct 202520:32	–	osv
OSV	CGA-QCHH-G7J2-GGCG	6 Jun 202412:29	–	osv
OSV	CGA-QCM5-V462-9Q5J	30 Oct 202519:00	–	osv
OSV	CGA-QF2R-RM5F-5PQH	6 Jun 202412:29	–	osv
OSV	CGA-QF5J-XMHH-C2VM	6 Jun 202412:29	–	osv
OSV	CGA-QF8R-6M32-H8HM	30 Oct 202519:36	–	osv
OSV	CGA-QFCX-26VX-FRMW	6 Jun 202412:29	–	osv
OSV	CGA-QFH9-M43J-X93M	6 Jun 202412:26	–	osv
OSV	CGA-QFHF-FGPG-F27R	6 Jun 202412:29	–	osv

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	16.04	all	golang-1.13	0	golang-1.13_0_all.deb
Ubuntu	18.04	all	golang-1.13	0	golang-1.13_0_all.deb
Ubuntu	22.04	all	golang-1.13	0	golang-1.13_0_all.deb
Ubuntu	20.04	all	golang-1.13	0	golang-1.13_0_all.deb
Ubuntu	16.04	all	golang-1.18	0	golang-1.18_0_all.deb
Ubuntu	18.04	all	golang-1.18	0	golang-1.18_0_all.deb
Ubuntu	22.04	all	golang-1.18	0	golang-1.18_0_all.deb
Ubuntu	20.04	all	golang-1.18	0	golang-1.18_0_all.deb
Ubuntu	16.04	all	golang-1.10	0	golang-1.10_0_all.deb
Ubuntu	18.04	all	golang-1.10	0	golang-1.10_0_all.deb

Source	Link
github	www.github.com/golang/go/issues/65065
github	www.github.com/golang/go/commit/3a855208e3efed2e9d7c20ad023f1fa78afcc0be%20(go1.22.1)
github	www.github.com/golang/go/commit/20586c0dbe03d144f914155f879fa5ee287591a1%20(go1.21.8)
go	www.go.dev/issue/65065
go	www.go.dev/cl/569340
groups	www.groups.google.com/g/golang-announce/c/5pwGVUPoMbg
pkg	www.pkg.go.dev/vuln/GO-2024-2600
cve	www.cve.org/CVERecord
ubuntu	www.ubuntu.com/security/notices/USN-6886-1

29 Jul 2025 11:11Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.14.3

EPSS0.01213

SSVC

http redirect client vulnerability sensitive headers domain match authorization cookie golang packages