A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. The name of the patch is 329b0c4844cc16a5a253c011b55180598e707735. It is recommended to upgrade the affected component. The identifier VDB-216745 was assigned to this vulnerability.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this     vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect.
    The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. The name of     the patch is 329b0c4844cc16a5a253c011b55180598e707735. It is recommended to upgrade the affected     component. The identifier VDB-216745 was assigned to this vulnerability. (CVE-2020-36627)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this
    vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect.
    The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. The name of
    the patch is 329b0c4844cc16a5a253c011b55180598e707735. It is recommended to upgrade the affected
    component. The identifier VDB-216745 was assigned to this vulnerability. (CVE-2020-36627)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-7398c7b4db advisory.

    Automatic update for golang-github-macaron-inject-0-0.19.20210110git138e592.fc39.

    ##### **Changelog**

    ```
    * Tue Jul 11 2023 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0-0.19
    - Fix FTBFS rhbz#2113331 rhbz#2156669
    * Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 0-0.18
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
    * Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 0-0.17
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
230225	Linux Distros Unpatched Vulnerability : CVE-2020-36627	Nessus	Misc.	medium
416612	SCA: security update for github.com/go-macaron/i18n (GHSA-jwrv-x6rx-8vfm)	Tenable Cloud Security	SCA Checks	medium
416612	SCA: security update for github.com/go-macaron/i18n (GHSA-jwrv-x6rx-8vfm)	Tenable Self-Hosted Container Security	SCA Checks	medium
185307	Fedora 39 : golang-github-macaron-inject (2023-7398c7b4db)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2020-36627

medium

Tenable Plugins

medium

medium

medium

medium