---

CVE-2021-33197 - log back

CVE-2021-33197 edited at 04 Jun 2021 07:36:35
Severity	- Unknown + Medium
Remote	- Unknown + Remote
Type	- Unknown + Url request injection
Description	+ A security issue has been found in Go before version 1.16.5. ReverseProxy in net/http/httputil could be made to forward certain hop-by-hop headers, including Connection. In case the target of the ReverseProxy was itself a reverse proxy, this would let an attacker drop arbitrary headers, including those set by the ReverseProxy.Director.
References	+ https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI/m/r_EP-NlKBgAJ + https://github.com/golang/go/issues/46313 + https://github.com/golang/go/commit/0410005dc458f23fb15f64354f9a24ca8f2fe044

CVE-2021-33197 created at 04 Jun 2021 07:28:43
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes