Go/github.com/gofiber/fiber/v2 CVE-2023-41338: unknown, EPSS 0.66%
IsFromLocal local address check can be circumvented in github.com/gofiber/fiber/v2
Action: Upgrade github.com/gofiber/fiber/v2 to 2.49.2-0.20230906112033-b8c9ede6efa2 or later.
go get github.com/gofiber/fiber/v2@v2.49.2-0.20230906112033-b8c9ede6efa2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.49.2-0.20230906112033-b8c9ede6efa2 | - |
Fixed versions
| 2.49.2-0.20230906112033-b8c9ede6efa2 |
Sources
- osv: GO-2023-2052
- https://github.com/gofiber/fiber/security/advisories/GHSA-3q5p-3558-364f
- https://github.com/gofiber/fiber/commit/b8c9ede6efa231116c4bd8bb9d5e03eac1cb76dc
CVE-2023-41338 · published · modified · JSON