Source |
The Hacker News |
Identifiant |
6089466 |
Date de publication |
2022-08-02 05:05:19 (vue: 2022-08-02 13:05:31) |
Titre |
New \'ParseThru\' Parameter Smuggling Vulnerability Affects Golang-based Applications |
Texte |
Security researchers have discovered a new vulnerability called ParseThru affecting Golang-based applications that could be abused to gain unauthorized access to cloud-based applications.
"The newly discovered vulnerability allows a threat actor to bypass validations under certain conditions, as a result of the use of unsafe URL parsing methods built in the language," Israeli cybersecurity firm |
Notes |
★★★
|
Envoyé |
Oui |
Condensat |
abused access actor affects allows applications based built bypass called parsethru affecting certain cloud conditions could cybersecurity discovered firm gain golang have israeli language methods new newly parameter parsethru parsing researchers result security smuggling threat unauthorized under unsafe url use validations vulnerability |
Tags |
Vulnerability
Threat
|
Stories |
|
Move |
|