CVE-2021-33197

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to…

published August 2, 2021

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02260 · 82.8th percentile
Published
2021-08-02T18:54Z
EPSS history
Timeline
  • 02 AUG 18:54Z
    In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to…
    cvelistv5