packages:
  - module: github.com/gofiber/fiber
    symbols:
      - Ctx.Attachment
    versions:
      - fixed: v1.12.6-0.20200710202935-a8ad5454363f
description: |
    Due to improper input validation when uploading a file, a malicious user may
    force the server to return arbitrary HTTP headers when the uploaded
    file is downloaded.
published: 2021-04-14T20:04:52Z
cves:
  - CVE-2020-15111
ghsas:
  - GHSA-9cx9-x2gp-9qvh
credit: Hasibul Hasan and Abdullah Shaleh
links:
    pr: github.com/gofiber/fiber/pull/579
    commit: https://github.com/gofiber/fiber/commit/a8ad5454363f627c3f9469c56c5faaf1b943f06a
    context:
      - https://github.com/gofiber/fiber/security/advisories/GHSA-9cx9-x2gp-9qvh