high7.5
CVE-2020-36567
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines
Impact
Gin is a HTTP web framework written in Go (Golang). Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/gin-gonic/gin | < 1.6.0 | 1.6.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gin-Gonic | Gin | before 1.6.0 |