CVE-2020-36627 Macaron i18n i18n.go redirect
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2020-36627?
CVE-2020-36627 is a medium-severity vulnerability in Macaron i18n, published on 25 Dec 2022.
Official description
A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. The name of the patch is 329b0c4844cc16a5a253c011b55180598e707735. It is recommended to upgrade the affected component. The identifier VDB-216745 was assigned to this vulnerability.
Weakness: CWE-601
Which versions are affected by CVE-2020-36627?
3 open source packages ship an affected version, including github.com/go-macaron/i18n. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/go-macaron/i18n Go | All versions | 0.5.0 |
github.com/go-macaron/i18n Go | All versions | 0.5.0 |
github.com/go-macaron/i18n Go | All versions | 0.5.0 |
Products include Go-Macaron I18n.
How do I fix CVE-2020-36627?
Upgrade github.com/go-macaron/i18n to 0.5.0 or later.
Is CVE-2020-36627 being exploited?
There is no known exploitation of CVE-2020-36627 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2020-36627, GHSA-jwrv-x6rx-8vfm, GO-2022-1187, UBUNTU-CVE-2020-36627.