GHSA-6vm3-jj99-7229HighCVSS 7.5
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines
🔗 CVE IDs covered (1)
📋 Description
Gin is a HTTP web framework written in Go (Golang). Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.
🎯 Affected products1
- go/github.com/gin-gonic/gin:< 1.6.0