search

CloudNativeSDWAN / cnwan-reader

Watch changes to your service registry and react to them.
Apache License 2.0
6 stars 6 forks source link

Explore `PassThru` vulnerability #49

Open asimpleidea opened 2 years ago

asimpleidea commented 2 years ago

https://www.oxeye.io/blog/golang-parameter-smuggling-attack

The project uses ParseUrl to parse the adaptor API base URL. Will dig to see if the project contains any vulnerability related to PassThru

asimpleidea commented 2 years ago

Update: this affects parsing query which only happens in the auto-generated openAPI code.

I will check if openAPI has a new version which fixes this, otherwise I will do it myself.