Skip to content
Fencer Vulns
high 7.3

CVE-2023-26125 json

Improper input validation in github.com/gin-gonic/gin

published 2023-05-04 3 y ago modified 2026-06-17 4 mo ago also GHSA-3vp4-m3rf-835h , EUVD-2023-1460

cvss
7.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.9%
EPSS 0.9% chance of exploitation in 30 days, percentile 60%
public exploits
0
none known

Summary

Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. **Note:** Although this issue does not pose a significant threat on its own it can serve as an input vector for other more impactful vulnerabilities. However, successful exploitation may depend on the server configuration and whether the header is used in the application logic.

Patch / fix

  • go github.com/gin-gonic/gin 1.9.0
  • n/a github.com/gin-gonic/gin 1.9.0
  • golang-github-gin-gonic-gin Debian 14, Debian 13 1.8.1-3

debian advisories DEBIAN-CVE-2023-26125

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-26125 updated cvss 7.3

golang-github-gin-gonic-gin: Improper Input Validation

  • Red Hat Migration Toolkit for Applications 6 mta/mta-admin-addon-rhel8, mta/mta-windup-addon-rhel8
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat Migration Toolkit for Virtualization migration-toolkit-virtualization/mtv-rhel8-operator Red Hat OpenShift Serverless openshift-serverless-1/openshift-serverless-1-client-kn-rhel8, openshift-serverless-1/openshift-serverless-1-ingress-rhel8-operator
    affected: workaround, no fix available
  • Red Hat Advanced Cluster Management for Kubernetes 2 rhacm2/thanos-rhel7, acm-multicluster-globalhub-agent-container
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat OpenShift Container Platform 4 openshift4/ose-image-customization-controller-rhel8 Red Hat OpenShift Data Science (RHODS) rhods/odh-ml-pipelines-cache-rhel8 Red Hat OpenShift Dev Spaces devspaces/machineexec-rhel8 Red Hat OpenShift GitOps openshift-gitops-1/argocd-rhel8
    affected: workaround, no fix available
  • Red Hat Openshift Sandboxed Containers openshift-sandboxed-containers/osc-rhel8-operator, openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Quay 3 quay/quay-rhel8, quay/quay-operator-rhel8
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Migration Toolkit for Virtualization 2.5 migration-toolkit-virtualization/mtv-controller-rhel9 2.5.2-5, migration-toolkit-virtualization/mtv-must-gather-api-rhel8 2.5.2-6
    fixed: vendor fix RHBA-2023:6078
  • Red Hat MTA 6.2 for RHEL 8 mta/mta-hub-rhel9 6.2.0-16
    fixed: vendor fix RHSA-2023:4627
show 3 more
  • Red Hat Migration Toolkit 1.7 rhmtc/openshift-migration-controller-rhel8 v1.7.11-4
    fixed: vendor fix RHSA-2023:4293
  • Red Hat OpenShift Container Platform 4.13 openshift4/ose-agent-installer-api-server-rhel8 v4.13.0-202410242307.p0.gec6e27b.assembly.stream.el8, openshift4/ose-agent-installer-csr-approver-rhel8 v4.13.0-202411300029.p0.g19034d8.assembly.stream.el8
    fixed: vendor fix RHSA-2024:8688
  • Red Hat Custom Metric Autoscaler operator for Red Hat Openshift custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 Red Hat Logging Subsystem for Red Hat OpenShift openshift-logging/logging-loki-rhel9, openshift-logging/loki-rhel8-operator, openshift-logging/lokistack-gateway-rhel8 Red Hat Migration Toolkit for Virtualization 2.5 migration-toolkit-virtualization/mtv-api-rhel9 2.5.2-5, migration-toolkit-virtualization/mtv-rhel8-operator 2.5.2-3, migration-toolkit-virtualization/mtv-virt-v2v-rhel9 2.5.2-5, migration-toolkit-virtualization/mtv-operator-bundle 2.5.2-20, migration-toolkit-virtualization/mtv-validation-rhel9 2.5.2-5, migration-toolkit-virtualization/mtv-must-gather-rhel8 2.5.2-4, +6 more Red Hat MTA 6.2 for RHEL 8 mta/mta-ui-rhel9 6.2.0-17, mta/mta-rhel8-operator 6.2.0-12, mta/mta-operator-bundle 6.2.0-29, mta/mta-pathfinder-rhel9 6.2.0-5, mta/mta-windup-addon-rhel9 6.2.0-11 Red Hat Advanced Cluster Management for Kubernetes 2 rhacm2/acm-grafana-rhel8, rhacm2/acm-prometheus-rhel8, rhacm2/multiclusterhub-rhel8, rhacm2/lighthouse-agent-rhel9, rhacm2/rbac-query-proxy-rhel8, rhacm2/thanos-receive-controller-rhel8 Red Hat Advanced Cluster Security 3 advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-scanner-rhel8
    +6 more products
    Red Hat Advanced Cluster Security 4 advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-scanner-rhel8 Red Hat Migration Toolkit 1.7 rhmtc/openshift-migration-ui-rhel8 v1.7.11-2, rhmtc/openshift-velero-plugin-rhel8 v1.7.11-3, rhmtc/openshift-migration-velero-rhel8 v1.7.11-3, rhmtc/openshift-migration-openvpn-rhel8 v1.7.11-2, rhmtc/openshift-migration-registry-rhel8 v1.7.11-2, rhmtc/openshift-migration-rhel8-operator v1.7.11-4, +10 more Red Hat OpenShift Container Platform 4 openshift4/ose-console, openshift4/ose-grafana, openshift4/ose-installer, openshift4/ose-ptp-operator, openshift4/ose-thanos-rhel9, openshift4/ose-coredns-rhel9, +8 more Red Hat OpenShift Container Platform 4.13 rhcos 413.92.202410300103-0, rhcos 413.92.202411212100-0, openshift4/ose-cli v4.13.0-202410190100.p0.gd192e90.assembly.stream.el8, openshift4/ose-cli v4.13.0-202411300029.p0.gd192e90.assembly.stream.el8, openshift4/ose-pod v4.13.0-202410190100.p0.g53fd427.assembly.stream.el8, openshift4/ose-pod v4.13.0-202411300029.p0.g53fd427.assembly.stream.el8, +378 more Red Hat OpenShift Container Platform Assisted Installer 1 rhai-tech-preview/assisted-installer-rhel8, rhai-tech-preview/assisted-installer-agent-rhel8 Red Hat Web Terminal web-terminal-exec-container
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
partial
Assessed
21 mo ago

Exploit prediction

0.91% chance of exploitation in the next 30 days, higher than 60% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/gin-gonic/gin/pull/3500 referenced PoC, tagged "exploit" by a source, unverified
  • security.snyk.io https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGINGONICGIN-3324285 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA ADP 3.1 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
NVD 3.1 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CNA 3.1 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
GitHub 3.1 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected packages

ecosystem package affected fixed in
go github.com/gin-gonic/gin
<1.9.0
1.9.0

Affected products

  • n/a github.com/gin-gonic/gin

Classification

Weakness
  • CWE-20 Improper Input Validation
  • CWE-77 Improper Neutralization of Special Elements used in a Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.