CRITICAL 9.6 Go
Labstack Echo Open Redirect vulnerability
GHSA-crxj-hrmp-4rwf · CVE-2022-40083 · GO-2022-1031
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF). Version 4.9.0 contains a patch for the issue.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-40083
- WEB https://github.com/labstack/echo/issues/2259
- WEB https://github.com/labstack/echo/pull/2260
- WEB https://github.com/labstack/echo/pull/2260/commits/3154abd1401554fe4d1c09ec550506d8625fc042
- WEB https://github.com/labstack/echo/commit/0ac4d74402391912ff6da733bb09fd4c3980b4e1
- PACKAGE https://github.com/labstack/echo
- WEB https://github.com/labstack/echo/releases/tag/v4.9.0
- WEB https://pkg.go.dev/vuln/GO-2022-1031
Ready to move
Start Securing
Free, no credit card | First findings in minutes