vulnerability

Debian: CVE-2017-20146: golang-github-gorilla-handlers -- security update

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
12/27/2022
Added
07/30/2024
Modified
01/28/2025

Description

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

Solution

debian-upgrade-golang-github-gorilla-handlers
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.