HTTP Response Splitting

Affecting github.com/gin-gonic/gin package, versions <1.7.0

Overview

github.com/gin-gonic/gin is a package that implements a HTTP web framework called gin.

Affected versions of this package are vulnerable to HTTP Response Splitting. When gin is exposed directly to the internet, a client's IP can be spoofed by setting the X-Forwarded-For header.

Remediation

Upgrade github.com/gin-gonic/gin to version 1.7.0 or higher.

References

• GitHub Commit
• GitHub PR