GitHub Advisoryadvisory · Go
GHSA-jwrv-x6rx-8vfm Macaron i18n Open Redirect vulnerability
MEDIUM
Official page ↗
- Aliases
- CVE-2020-36627
- Ecosystem
- Go
- Packages
- github.com/go-macaron/i18n
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-601
- Reviewed
- 2022-12-30
Affected packages
• Go github.com/go-macaron/i18n: < 0.5.0 → fixed in 0.5.0
Description
A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 can address this issue. The name of the patch is 329b0c4844cc16a5a253c011b55180598e707735. It is recommended to upgrade the affected component. The identifier VDB-216745 was assigned to this vulnerability.
Related
Alias · CVE (1)
- CVE-2020-36627 A vulnerability was found in Macaron i18n. vulnerability
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2020-36627 advisory
- https://github.com/go-macaron/i18n/commit/329b0c4844cc16a5a253c011b55180598e707735 web
- https://github.com/go-macaron/i18n package
- https://github.com/go-macaron/i18n/releases/tag/v0.5.0 web
- https://pkg.go.dev/vuln/GO-2022-1187 web
- https://vuldb.com/?id.216745 web