github.com/lin-snow/ech0 vulnerabilities (Go)
18 vulnerabilities.
-
github.com/lin-snow/ech0Go Ech0: ParseAcceptLanguage `_` separator bypass enables ~70x CPU amplification via Accept-Language header in i18n.Middleware 8.7 High -
github.com/lin-snow/ech0Go Ech0 before 4.7.3 Access Token Revocation Bypass 9.1 Critical -
github.com/lin-snow/ech0Go Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass 8.8 High -
github.com/lin-snow/ech0Go Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo 8.3 High -
github.com/lin-snow/ech0Go Ech0 before 4.7.3 Unauthenticated fav_count Modification 6.9 Medium -
github.com/lin-snow/ech0Go Ech0 before 4.7.3 Unauthenticated Like Endpoint Metric Inflation 6.9 Medium -
github.com/lin-snow/ech0Go Ech0 before 4.7.3 Stored XSS via RSS feed tag names 4.8 Medium -
github.com/lin-snow/ech0Go Ech0 before 4.7.3 Email Disclosure via Public API 6.9 Medium -
github.com/lin-snow/ech0Go Ech0 before 4.4.3 Stored XSS via SVG Upload 4.8 Medium -
github.com/lin-snow/ech0Go Ech0 before 4.4.3 SSRF via DNS Resolution Bypass 5.1 Medium -
github.com/lin-snow/ech0Go Ech0 before 4.4.3 Missing Authorization on System Logs 5.3 Medium -
github.com/lin-snow/ech0Go Ech0 before 4.4.3 Authentication Bypass via Comment Panel 7.0 High -
github.com/lin-snow/ech0Go Ech0 before 4.4.3 Scope Bypass via profile:read Token 8.5 High -
github.com/lin-snow/ech0Go Ech0 before 4.4.3 Missing Authorization via dashboard log endpoints 7.1 High -
github.com/lin-snow/ech0Go Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement 7.2 High -
github.com/lin-snow/ech0Go Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata 7.2 High -
github.com/lin-snow/ech0Go Ech0 Affected by Unauthenticated Server-Side Request Forgery in Website Preview Feature 7.5 High -
github.com/lin-snow/ech0Go Ech0 authenticated user-list exposed data via public `/api/allusers` endpoint 5.3 Medium