Go/github.com/swaggo/http-swagger CVE-2022-24863, CVE-2024-25712: unknown, EPSS 2.44%
Unprotected file upload in github.com/swaggo/http-swagger
Action: Upgrade github.com/swaggo/http-swagger to 1.2.6 or later.
go get github.com/swaggo/http-swagger@v1.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.6 | - |
Fixed versions
| 1.2.6 |
Sources
- osv: GO-2022-0427
- https://cosmosofcyberspace.github.io/improper_http_method_leads_to_xss/poc.html
- https://github.com/swaggo/http-swagger/pull/62
- https://github.com/swaggo/http-swagger/issues/61
CVE-2022-24863, CVE-2024-25712 · published · modified · JSON