ntbosscher/gobase · Security
gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition
- GHSA ID
- GHSA-h2x7-2ff6-v32p
- CVE ID
- CVE-2022-2583
- Severity
- low
- Published
- Updated
- CVSS
- 3.7 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS v3
- 3.7 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
Impact
Incorrect routing of some HTTP requests when using httpauth due to a race condition
Patches
Upgrade to version 0.7.2 for fix
Workarounds
None
For more information
If you have any questions or comments about this advisory:
- Email us at [email protected]
CWEs
- CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
References
- https://github.com/ntbosscher/gobase/security/advisories/GHSA-h2x7-2ff6-v32p ↗
- https://github.com/ntbosscher/gobase/commit/a8d40bce9c429d324122d18c446924dab809e812 ↗
- https://pkg.go.dev/vuln/GO-2022-0400 ↗
- https://nvd.nist.gov/vuln/detail/CVE-2022-2583 ↗
- https://github.com/advisories/GHSA-h2x7-2ff6-v32p ↗