go-aah/aah

go-aah/aah

GitHubGitHub
GitHubgithub.com
aahframework.orgaahframework.org
Releases24
Frequency1 month 2 weeks
Last Release
Stars684
A secure, flexible, rapid Go web framework
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-36559↗
7.5 HIGH—

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.