Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Go-macaron records in CISA KEVNo Go-macaron vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 30
macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0141 · Published 2020-05-05 · Partial fix · 1.3.7 CWE-601
