Vulnerabilities

TI-2018-15287 CVE-2018-25060 · GHSA-hhxg-px5h-jc32

Macaron csrf csrf.go missing secure attribute

LOW 34

A vulnerability was found in Macaron csrf and classified as problematic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00564 Published 2022-12-30 Fixed in 0.0.0-20180426211050-dadd1711a617 CWE-614

TI-2020-18821 CVE-2020-36627 · GHSA-jwrv-x6rx-8vfm

LOW 28

A vulnerability was found in Macaron i18n.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00642 Published 2022-12-25 Partial fix · 0.5.0 CWE-601

TI-2020-10071 CVE-2020-12666 · GHSA-733f-44f3-3frw

LOW 30

macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0141 Published 2020-05-05 Partial fix · 1.3.7 CWE-601