GHSA-6vm3-jj99-7229HighCVSS 7.5

Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines

Published
December 27, 2022
Last Modified
February 3, 2023

🔗 CVE IDs covered (1)

📋 Description

Gin is a HTTP web framework written in Go (Golang). Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.

🎯 Affected products1

  • go/github.com/gin-gonic/gin:< 1.6.0

🔗 References (5)