GITHUBEXPLOIT 4.3 MEDIUM

Exploit for Download of Code Without Integrity Check in Gin-Gonic Gin_F197A883-101B-5C7C-AA56-BCA681BC33E0

4.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

gin-vulnerable Demo consumer pinned to github.com/gin-gonic/gin v1.7.0 vulnerable to CVE-2023-29401. The /download/:filename handler passes user input directly to Context.FileAttachment — the exploit-condition pattern Endor flags as exploitable...
Visit Original Source

Basic Information

ID F197A883-101B-5C7C-AA56-BCA681BC33E0
Published May 20, 2026 at 05:45

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.