x/vulndb: potential Go vuln in github.com/mosn/mosn: CVE-2021-32163

[GoVulnBot]

CVE-2021-32163 references github.com/mosn/mosn, which may be a Go module.

Description:
Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via case-sensitive JWT authorization.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2021-32163
• JSON: https://github.com/CVEProject/cvelist/tree/59920a96915f9b802b2a0c99c80ee26efd3a5eef/2021/32xxx/CVE-2021-32163.json
• report: case sensitive in jwtauthn match prefix mosn/mosn#1633
• fix: feature: URL prefix case-sensitive mosn/mosn#1637
• Imported by: https://pkg.go.dev/github.com/mosn/mosn?tab=importedby

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: github.com/mosn/mosn
    packages:
      - package: n/a
description: |
    Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via case-sensitive JWT authorization.
cves:
  - CVE-2021-32163
references:
  - report: https://github.com/mosn/mosn/issues/1633
  - fix: https://github.com/mosn/mosn/pull/1637

[neild]

Package no longer exists after several refactorings, but appears to be an internal component of a server (HTTP proxy).

[gopherbot]

Change https://go.dev/cl/471796 mentions this issue: data/excluded: batch add excluded reports

[gopherbot]

Change https://go.dev/cl/592759 mentions this issue: data/reports: unexclude 75 reports

[gopherbot]

Change https://go.dev/cl/606782 mentions this issue: data/reports: unexclude 20 reports (2)