未評価
Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied tok...
CVE-2020-36564
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory pkg.go.dev
- patch github.com
- patch github.com