github.com/labstack/echo/v4 vulnerabilities (Go)
17 vulnerabilities.
-
github.com/labstack/echo/v4Go Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto 4.7 Medium -
github.com/labstack/echo/v4Go Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers 5.9 Medium -
github.com/labstack/echo/v4Go Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI 6.1 Medium -
github.com/labstack/echo/v4Go Echo: Static Middleware Double-Unescape Path Traversal 5.9 Medium -
github.com/labstack/echo/v4Go Echo static file middleware route protection bypass via encoded dot-dot traversal 5.9 Medium -
github.com/labstack/echo/v4Go Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration 5.3 Medium -
github.com/labstack/echo/v4Go Echo: Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob 6.1 Medium -
github.com/labstack/echo/v4Go Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default 5.3 Medium -
github.com/labstack/echo/v4Go Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path 7.5 High -
github.com/labstack/echo/v4Go Echo: CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method 5.3 Medium -
github.com/labstack/echo/v4Go Echo: WebSocket proxy can retain connections and handlers after client disconnect 8.2 High -
github.com/labstack/echo/v4Go Echo: Decompress permits unbounded gzip expansion in v4 8.2 High -
github.com/labstack/echo/v4Go Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls 9.1 Critical -
github.com/labstack/echo/v4Go Echo: BodyDump captures request and response bodies without size limits in v4 8.2 High -
github.com/labstack/echo/v4Go Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files 7.5 High -
github.com/labstack/echo/v4Go Labstack Echo Open Redirect vulnerability 9.6 Critical -
github.com/labstack/echo/v4Go Directory traversal on Windows in github.com/labstack/echo/v4 5.3 Medium