Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37379
HistoryOct 03, 2022 - 3:18 a.m.

Server-Side Request Forgery (SSRF)

2022-10-0303:18:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
server-side request forgery
ssrf
static handler
url sanitization
vulnerability
labstack/echo

0.026 Low

EPSS

Percentile

90.3%

github.com/labstack/echo is vulnerable to server side request forgery. The vulnerability exists due to a lack of sanitization of URL via the Static Handler component allowing an attacker to redirect a user to a malicious website.

0.026 Low

EPSS

Percentile

90.3%