CVE-2022-40083
CVE-2022-40083
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).
CVSS 9.6 · Critical · EPSS 3.2% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
golang-github-labstack-echo Debian:12
- Versions
- 4.11.1-1
- 4.11.1-2
- 4.12.0-1
- 4.2.1-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo Debian:13
- Affected ranges
- ECOSYSTEM: < 4.11.1-1
Update to 4.11.1-1
golang-github-labstack-echo Debian:14
- Affected ranges
- ECOSYSTEM: < 4.11.1-1
Update to 4.11.1-1
golang-github-labstack-gommon Ubuntu:18.04:LTS
- Versions
- 0.2.3-1
- 0.2.3-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo.v2 Ubuntu:20.04:LTS
- Versions
- 2.2.0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo.v3 Ubuntu:20.04:LTS
- Versions
- 3.3.5-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-gommon Ubuntu:20.04:LTS
- Versions
- 0.2.6-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo Ubuntu:22.04:LTS
- Versions
- 4.2.1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo.v2 Ubuntu:22.04:LTS
- Versions
- 2.2.0-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo.v3 Ubuntu:22.04:LTS
- Versions
- 3.3.10-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-gommon Ubuntu:22.04:LTS
- Versions
- 0.2.6-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo Ubuntu:24.04:LTS
- Versions
- 4.11.1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-gommon Ubuntu:24.04:LTS
- Versions
- 0.2.6-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo Ubuntu:25.10
- Versions
- 4.12.0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-gommon Ubuntu:25.10
- Versions
- 0.2.6-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo Ubuntu:26.10
- Versions
- 4.12.0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-gommon Ubuntu:26.10
- Versions
- 0.2.6-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-echo Ubuntu:26.04:LTS
- Versions
- 4.12.0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
golang-github-labstack-gommon Ubuntu:26.04:LTS
- Versions
- 0.2.6-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published