Closed
Description
Description
Gin is a web framework written in Go.
Gin prior to version v1.9.0 and below is vulnerable to Reflect File Download.
This problem occurs when FileAttachment() is used.
A PullRequest to correct this problem has been provided but has not yet been fixed.
Affected Modules, Packages, Versions and Symbols
Module: github.com/gin-gonic/gin
Package: github.com/gin-gonic/gin
Versions:
- Introduced: 1.9.0
Symbols:
- FileAttachmentDoes this vulnerability already have an associated CVE ID?
No
CVE ID
No response
Credit
No response
CWE ID
No response
Pull Request
Commit
No response
References
Report:
gin-gonic/gin#3555
Additional information
No response