CVE-2020-15586
—CVSS 3.1
5.9 medium
EPSS
3%p86
Published
()
Modified
Description
Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.
- Vendors
- golangcloudfoundrydebianopensusefedoraproject
- Products
- go, cf-deployment, routing-release, debian linux, leap, fedora
- Weakness
- CWE-362
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.