module: gopkg.in/macaron.v1
versions:
- fixed: v1.3.7
description: |
  An attacker can craft a malicious URL which will cause the server
  to redirect a user to a secondary URL.
published: 2021-04-14T12:00:00Z
cve: CVE-2020-12666
credit: '@ev0A'
symbols:
- staticHandler
links:
  pr: https://github.com/go-macaron/macaron/pull/199
  commit: https://github.com/go-macaron/macaron/commit/addc7461c3a90a040e79aa75bfd245107a210245
  context:
  - https://github.com/go-macaron/macaron/issues/198