CVE-2018-20744
3 advisories.
Go/github.com/gofiber/fiber/v2 CVE-2018-20744: medium 5.9
github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error
Action: Upgrade github.com/gofiber/fiber/v2 to 2.43.0 or later.
go get github.com/gofiber/fiber/v2@v2.43.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.43.0 | - |
Fixed versions
| 2.43.0 |
Sources
- osv: GHSA-927h-x4qj-r242
- https://nvd.nist.gov/vuln/detail/CVE-2018-20744
- https://github.com/gofiber/fiber/issues/2338
- https://github.com/rs/cors/issues/55
- https://github.com/gofiber/fiber/pull/2339
- https://github.com/rs/cors/pull/57
- https://github.com/gofiber/fiber
- https://web.archive.org/web/20200227091122/http://www.securityfocus.com/bid/106834
- https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf
CVE-2018-20744 · published · modified · JSON
Go/github.com/rs/cors CVE-2018-20744: medium 5.9
github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error
Action: Upgrade github.com/rs/cors to 1.5.0 or later.
go get github.com/rs/cors@v1.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
Fixed versions
| 1.5.0 |
Sources
- osv: GHSA-927h-x4qj-r242#Go/github.com/rs/cors
- https://nvd.nist.gov/vuln/detail/CVE-2018-20744
- https://github.com/gofiber/fiber/issues/2338
- https://github.com/rs/cors/issues/55
- https://github.com/gofiber/fiber/pull/2339
- https://github.com/rs/cors/pull/57
- https://github.com/gofiber/fiber
- https://web.archive.org/web/20200227091122/http://www.securityfocus.com/bid/106834
- https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf
CVE-2018-20744 · published · modified · JSON
Go/github.com/rs/cors CVE-2018-20744: unknown
Insecure wildcard CORS policy in github.com/rs/cors
Action: Upgrade github.com/rs/cors to 1.5.0 or later.
go get github.com/rs/cors@v1.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
Fixed versions
| 1.5.0 |
Sources
CVE-2018-20744 · published · modified · JSON