CVE:CVE-2020-12666
CNNVD:CNNVD-202005-162
macaron是一款基于Go语言的模块化Web框架。
macaron 1.3.7之前版本中的静态处理程序存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade go-macaron macaron to a higher version than 1.3.7,and avoid the version (,1.3.7); Upgrade fedoraproject fedora to a higher version than 32,and avoid the version 32