Remote Code Execution via Unsanitized Input in GitHub Revel Query Parser

Remote Code Execution via Unsanitized Input in GitHub Revel Query Parser

CVE-2020-36568 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation.

Learn more about our Web Application Penetration Testing UK.