Improper Input Validation Affecting github.com/gin-gonic/gin package, versions <0.5
Attack Complexity
Low
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications-
snyk-id
SNYK-GOLANG-GITHUBCOMGINGONICGIN-535024
-
published
20 Nov 2019
-
disclosed
29 Dec 2014
-
credit
DutchCoders
How to fix?
Upgrade github.com/gin-gonic/gin to version 0.5 or higher.
Overview
github.com/gin-gonic/gin is a package that implements a HTTP web framework called gin.
Affected versions of this package are vulnerable to Improper Input Validation. It is possible for a client to spoof the IP address sent to a server.