CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).

Score

CVSS 3.1 9.6 Critical

Status

Modified - cve@mitre.org

Published

2022-09-28

Last modified

2025-05-21

Weaknesses

CWE-601

Affected products

• Echo (Labstack)

References

• https://github.com/labstack/echo/issues/2259