← All advisories

Medium severity6.1NVD Advisory· Published May 5, 2020· Updated Jun 17, 2026

CVE-2020-12666

CVE-2020-12666

Description

macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
gopkg.in/macaron.v1Go	< 1.3.7	1.3.7

Affected products

4

Go Macaron/Macaron
cpe:2.3:a:go-macaron:macaron:*:*:*:*:*:*:*:*
Range: <1.3.7
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
macaron/macarondescription
ghsa-coords
pkg:golang/gopkg.in/macaron.v1
Range: < 1.3.7

Patches

Vulnerability mechanics

References

11

github.com/go-macaron/macaron/issues/198nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-733f-44f3-3frwghsaADVISORY
github.com/go-macaron/macaron/releases/tag/v1.3.7nvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2020-12666ghsaADVISORY
github.com/go-macaron/macaron/commit/addc7461c3a90a040e79aa75bfd245107a210245ghsaWEB
github.com/go-macaron/macaron/issues/198ghsaWEB
github.com/go-macaron/macaron/pull/199ghsaWEB
github.com/go-macaron/macaron/pull/199/commits/6bd9385542f7133467ab7d09a5f28f7d5dc52af7ghsaWEB
lists.fedoraproject.org/archives/list/[email protected]/message/3QEUOHRC4EN4WZ66EVFML2UCV7ZQ63XZghsaWEB
pkg.go.dev/vuln/GO-2020-0039ghsaWEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QEUOHRC4EN4WZ66EVFML2UCV7ZQ63XZ/nvd

News mentions

0

No linked articles in our index yet.