CVE-2022-1996

Authorization Bypass Through User-Controlled Key in emicklei/go-restful

Summary

The description as published by the source.

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Go github.com/emicklei/go-restful/v3

[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.8.0"}]}]

Go github.com/emicklei/go-restful

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.16.0"}]}]

Go github.com/emicklei/go-restful/v2

[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"2.7.1"}]}]

Fixed packages published by each distribution for this CVE

CWE-639