Unrated
Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied tok...
CVE-2020-36564
First seen on SecPulse
Original description The description as published by the source.
Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory pkg.go.dev
- patch github.com
- patch github.com