Skip to content

Commit

Permalink
data/reports/GO-2021-0052: update fixed version
Browse files Browse the repository at this point in the history
As per gin-gonic/gin#2862,
this issue was not fully fixed until gin v1.7.7.

Fixes #52.

Change-Id: I3c285c72eacd6c09ecc67bab681bdf44a60e2067
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/428036
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Damien Neil <dneil@google.com>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
  • Loading branch information
neild committed Sep 2, 2022
1 parent df98aa4 commit 5ba2661
Showing 1 changed file with 20 additions and 2 deletions.
22 changes: 20 additions & 2 deletions data/reports/GO-2021-0052.yaml
@@ -1,11 +1,22 @@
modules:
- module: github.com/gin-gonic/gin
versions:
- fixed: 1.6.3-0.20210406033725-bfc8ca285eb4
- fixed: 1.7.7
vulnerable_at: 1.7.6
packages:
- package: github.com/gin-gonic/gin
symbols:
- Context.ClientIP
- Context.RemoteIP
derived_symbols:
- Context.Next
- Engine.HandleContext
- Engine.Run
- Engine.RunFd
- Engine.RunListener
- Engine.RunTLS
- Engine.RunUnix
- Engine.ServeHTTP
description: |
Due to improper HTTP header santization, a malicious user can spoof their
source IP address by setting the X-Forwarded-For header. This may allow
Expand All @@ -15,8 +26,15 @@ cves:
- CVE-2020-28483
ghsas:
- GHSA-h395-qcrw-5vmq
credit: '@sorenh'
credit: '@sorenisanerd'
references:
- report: https://github.com/gin-gonic/gin/issues/2862
- report: https://github.com/gin-gonic/gin/issues/2473
- report: https://github.com/gin-gonic/gin/issues/2232
- fix: https://github.com/gin-gonic/gin/pull/2844
- fix: https://github.com/gin-gonic/gin/commit/5929d521715610c9dd14898ebbe1d188d5de8937
- fix: https://github.com/gin-gonic/gin/pull/2632
- fix: https://github.com/gin-gonic/gin/commit/bfc8ca285eb46dad60e037d57c545cd260636711
- fix: https://github.com/gin-gonic/gin/pull/2675
- fix: https://github.com/gin-gonic/gin/commit/03e5e05ae089bc989f1ca41841f05504d29e3fd9
- web: https://github.com/gin-gonic/gin/pull/2474

0 comments on commit 5ba2661

Please sign in to comment.