REDHAT-BUG-2295302: Medium severity gin-gonic cors middleware vulnerability
Gin-Gonic CORS middleware mishandles a wildcard at the end of an origin string. Examples: https://example.community/ is accepted by the origin string https://example.com/ and http://localhost.example.com/ is accepted by the origin string http://localhost/ .
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2295302?
The severity of REDHAT-BUG-2295302 is classified as moderate due to the potential for CORS misconfiguration.
How do I fix REDHAT-BUG-2295302?
To fix REDHAT-BUG-2295302, ensure that the CORS middleware properly validates origin strings without accepting wildcards improperly.
Which versions of Gin-Gonic CORS middleware are affected by REDHAT-BUG-2295302?
All versions of the Gin-Gonic CORS middleware that mishandle wildcard origin strings are affected by REDHAT-BUG-2295302.
What risk does REDHAT-BUG-2295302 pose to applications?
REDHAT-BUG-2295302 poses a risk of exposing applications to Cross-Origin Resource Sharing vulnerabilities that can lead to security breaches.
Where can I find more information on REDHAT-BUG-2295302?
More information on REDHAT-BUG-2295302 can be obtained by reviewing the associated Red Hat bug report.