CVE-2025-47910: CVE-2025-47910: güvenlik açığı

Açıklama (NVD)

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

Özet bilgiler

CVSS v3.1

5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS

%0,35 (yüzdelik 28)

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• go.dev
• go.dev
• groups.google.com
• pkg.go.dev