vulnerability

Debian: CVE-2017-20146: golang-github-gorilla-handlers -- security update

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
2022-12-27
Added
2024-07-30
Modified
2025-01-28

Description

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

Solution

debian-upgrade-golang-github-gorilla-handlers
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.