CVE-2022-1996: Authorization Bypass Through User-Controlled Key in go-restful

June 9, 2022

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.

References

github.com/advisories/GHSA-r48q-9g5r-8q2h
github.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10
github.com/emicklei/go-restful/issues/489
huntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1
nvd.nist.gov/vuln/detail/CVE-2022-1996

Detect and mitigate CVE-2022-1996 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →