mikeee / demo_gin-csrf Goto Github PK

.github/workflows/go.yml

• actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-go v4

go.mod

• go 1.19
• github.com/gin-contrib/sessions v0.0.5
• github.com/gin-gonic/gin v1.9.1
• github.com/stretchr/testify v1.8.4
• github.com/utrack/gin-csrf v0.0.0-20190424104817-40fb8d2c8fca@40fb8d2c8fca

Vulnerable Library - github.com/gin-gonic/gIn-v1.9.0

Library home page: https://proxy.golang.org/github.com/gin-gonic/gin/@v/v1.9.0.zip

CVE-2023-29401

Vulnerable Library - github.com/gin-gonic/gIn-v1.9.0

Library home page: https://proxy.golang.org/github.com/gin-gonic/gin/@v/v1.9.0.zip

Dependency Hierarchy:

• ❌ github.com/gin-gonic/gIn-v1.9.0 (Vulnerable Library)

Found in base branch: master

Vulnerability Details

In Gin Web Framework the filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of "setup.bat";x=.txt" will be sent as a file named "setup.bat". If the FileAttachment function is called with names provided by an untrusted source, this may permit an attacker to cause a file to be served with a name different than provided. Maliciously crafted attachment file name can modify the Content-Disposition header.

Publish Date: 2023-04-05

URL: CVE-2023-29401

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: Required
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

Step up your Open Source Security Game with Mend here