Security Advisory

CVE-2021-33197

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-02 18:54:45
Last updated 2024-08-03 23:42:20
Assigner mitre
State PUBLISHED

Description

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.