Description
In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
Published: 2021-08-02
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2021-19910 In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00017}

epss

{'score': 0.00037}


Subscriptions

Golang Go
Redhat Advanced Cluster Security Container Native Virtualization Devtools Enterprise Linux Jaeger Openshift Openshift Data Foundation Openstack Rhmt Serverless
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-03T23:42:20.296Z

Reserved: 2021-05-19T00:00:00.000Z

Link: CVE-2021-33197

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-08-02T19:15:08.493

Modified: 2024-11-21T06:08:29.870

Link: CVE-2021-33197

cve-icon Redhat

Severity : Moderate

Publid Date: 2021-05-21T00:00:00Z

Links: CVE-2021-33197 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses