GO-2022-1031

Source
https://pkg.go.dev/vuln/GO-2022-1031
Import Source
https://vuln.go.dev/ID/GO-2022-1031.json
Aliases
Published
2022-10-11T21:29:24Z
Modified
2023-11-08T04:10:22.426797Z
Details

Labstack Echo contains an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).

References

Affected packages

Go / github.com/labstack/echo/v4

Package

Name
github.com/labstack/echo/v4

Affected ranges

Type
SEMVER
Events
Introduced
0The exact introduced commit is unknown
Fixed
4.9.0

Ecosystem specific 

{
    "imports": [
        {
            "path": "github.com/labstack/echo/v4",
            "symbols": [
                "Echo.Static",
                "Echo.StaticFS",
                "Group.Static",
                "Group.StaticFS",
                "StaticDirectoryHandler"
            ]
        }
    ]
}