Zeromicro vulnerabilities
We track 1 vulnerability in Zeromicro products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2024.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Zeromicro vulnerabilities
- 9.1 Critical severity
go-zero: Authorization Bypass Through User-Controlled Key
go-zero is a web and rpc framework. Go-zero allows user to specify a CORS Filter with a configurable allows param - which is an array of domains allowed in CORS policy. However, the `isOriginAllowed` uses `strings.HasSuffix` to check the origin, which leads to