[github.com/labstack/echo/v4] Labstack Echo Open Redirect vulnerability

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF). Version 4.9.0 contains a patch for the issue.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-40083
• https://github.com/labstack/echo/issues/2259
• https://github.com/labstack/echo/pull/2260
• https://github.com/labstack/echo/releases/tag/v4.9.0
• https://github.com/advisories/GHSA-crxj-hrmp-4rwf