Skip to content

Commit 5ba2661

Browse files
committed
data/reports/GO-2021-0052: update fixed version
As per gin-gonic/gin#2862, this issue was not fully fixed until gin v1.7.7. Fixes #52. Change-Id: I3c285c72eacd6c09ecc67bab681bdf44a60e2067 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/428036 TryBot-Result: Gopher Robot <[email protected]> Run-TryBot: Damien Neil <[email protected]> Reviewed-by: Tatiana Bradley <[email protected]>
1 parent df98aa4 commit 5ba2661

File tree

1 file changed

+20
-2
lines changed

1 file changed

+20
-2
lines changed

data/reports/GO-2021-0052.yaml

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,22 @@
11
modules:
22
- module: github.com/gin-gonic/gin
33
versions:
4-
- fixed: 1.6.3-0.20210406033725-bfc8ca285eb4
4+
- fixed: 1.7.7
5+
vulnerable_at: 1.7.6
56
packages:
67
- package: github.com/gin-gonic/gin
78
symbols:
89
- Context.ClientIP
10+
- Context.RemoteIP
11+
derived_symbols:
12+
- Context.Next
13+
- Engine.HandleContext
14+
- Engine.Run
15+
- Engine.RunFd
16+
- Engine.RunListener
17+
- Engine.RunTLS
18+
- Engine.RunUnix
19+
- Engine.ServeHTTP
920
description: |
1021
Due to improper HTTP header santization, a malicious user can spoof their
1122
source IP address by setting the X-Forwarded-For header. This may allow
@@ -15,8 +26,15 @@ cves:
1526
- CVE-2020-28483
1627
ghsas:
1728
- GHSA-h395-qcrw-5vmq
18-
credit: '@sorenh'
29+
credit: '@sorenisanerd'
1930
references:
31+
- report: https://github.com/gin-gonic/gin/issues/2862
32+
- report: https://github.com/gin-gonic/gin/issues/2473
33+
- report: https://github.com/gin-gonic/gin/issues/2232
34+
- fix: https://github.com/gin-gonic/gin/pull/2844
35+
- fix: https://github.com/gin-gonic/gin/commit/5929d521715610c9dd14898ebbe1d188d5de8937
2036
- fix: https://github.com/gin-gonic/gin/pull/2632
2137
- fix: https://github.com/gin-gonic/gin/commit/bfc8ca285eb46dad60e037d57c545cd260636711
38+
- fix: https://github.com/gin-gonic/gin/pull/2675
39+
- fix: https://github.com/gin-gonic/gin/commit/03e5e05ae089bc989f1ca41841f05504d29e3fd9
2240
- web: https://github.com/gin-gonic/gin/pull/2474

0 commit comments

Comments
 (0)