CVE-2020-12666

MEDIUM

macaron < 1.3.7 - Open Redirect via Static Handler

Title source: llm

macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL.

Core 3

Core References

Release Notes, Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

CVSS v3 6.1

EPSS 0.0138

EPSS Percentile 68.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-601

Status published

Products (3)

fedoraproject/fedora 32

go-macaron/macaron < 1.3.7

gopkg.in/macaron.v1 0 - 1.3.7Go

Published May 05, 2020

Tracked Since Feb 18, 2026