Go/github.com/rs/cors CVE-2018-20744: medium 5.9, EPSS 0.72%

github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error

Action: Upgrade github.com/rs/cors to 1.5.0 or later.

go get github.com/rs/cors@v1.5.0

Affected

Fixed versions

Sources

• osv: GHSA-927h-x4qj-r242#Go/github.com/rs/cors
• https://nvd.nist.gov/vuln/detail/CVE-2018-20744
• https://github.com/gofiber/fiber/issues/2338
• https://github.com/rs/cors/issues/55
• https://github.com/gofiber/fiber/pull/2339
• https://github.com/rs/cors/pull/57
• https://github.com/gofiber/fiber
• https://web.archive.org/web/20200227091122/http://www.securityfocus.com/bid/106834
• https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf

CVE-2018-20744 · published 2022-05-14T01:33:06Z · modified 2024-05-20T21:53:21Z · JSON