nccgroup/sobelow

Support detecting for Wildcard check_origin Vulnerability

オープン

#117 opened on 2023/01/10

 (0 件のコメント) (0 件のリアクション) (0 人の担当者)Elixir (119 件のフォーク)batch import
featuregood first issue

Repository metrics

Stars
 (1,780 個のスター)
PR merge metrics
 (30d に merged PR はありません)

説明

We should create a new detection for the vulnerability that was patched in the Phoenix 1.3.5, 1.4.18, 1.5.14, and 1.6.14 releases - this could be done somewhat similarly to how Vuln.Ecto works with some conditional logic for checking if wildcard origin is present.

https://elixirforum.com/t/phoenix-1-3-1-4-1-5-and-1-6-security-releases-for-wildcard-check-origin-vulnerability/50902

コントリビューターガイド