[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fE9rAvBuq7kSWIkRpZEIDk1ICxY8ObqWWz57iqokAVPY":3,"g5a-risk:CVE-2019-14809":161},{"success":4,"data":5,"meta":159},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":53,"references":54,"referencesCount":105,"weaknesses":106,"weaknessesCount":110,"isActivelyExploited":111,"cisaInfo":15,"otxData":15,"relatedBlogPosts":112,"seoMetadata":113,"configurations":138,"relatedVendorCves":157,"notableEvents":158},"CVE-2019-14809","What is CVE-2019-14809?","net\u002Furl in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname() nor Port(), and is related to a non-numeric port number. For example, an attacker can compose a crafted javascript:\u002F\u002F URL that results in a hostname of google.com.","net\u002Furl in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is re...","2019-08-13T21:15:11.427","2023-11-07T03:05:18.837",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.08359,[39,39,39,39,39,39,39],"Critical",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"golang","go","*","cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",2,[55,59,62,65,68,71,75,82,86,89,93,96,101],{"url":56,"source":57,"tags":58},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-08\u002Fmsg00076.html","Opensuse",[],{"url":60,"source":57,"tags":61},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-09\u002Fmsg00002.html",[],{"url":63,"source":57,"tags":64},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-09\u002Fmsg00011.html",[],{"url":66,"source":57,"tags":67},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-09\u002Fmsg00021.html",[],{"url":69,"source":57,"tags":70},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-09\u002Fmsg00038.html",[],{"url":72,"source":73,"tags":74},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3433","Red Hat",[],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fgithub.com\u002Fgolang\u002Fgo\u002Fissues\u002F29098","GitHub",[79,80,81],"Exploit","Patch","Third Party Advisory",{"url":83,"source":84,"tags":85},"https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#%21topic\u002Fgolang-announce\u002F0uuMm1BwpHE","Google",[],{"url":87,"source":84,"tags":88},"https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#%21topic\u002Fgolang-announce\u002F65QixT3tcmg",[],{"url":90,"source":91,"tags":92},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F4BBP27PZGSY6OP6D26E5FW4GZKBFHNU7\u002F","Fedoraproject",[],{"url":94,"source":91,"tags":95},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FLYO6E3H34C346D2E443GLXK7OK6KIYIQ\u002F",[],{"url":97,"source":98,"tags":99},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FAug\u002F31","Seclists",[100,81],"Mailing List",{"url":102,"source":103,"tags":104},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2019\u002Fdsa-4503","Debian",[81],13,[107],{"id":108,"name":108,"description":109},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":114,"metaDescription":115,"keywords":116,"canonicalUrl":117,"structuredData":118},"What is CVE-2019-14809? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-14809, a critical severity cyber security vulnerability from 2019. net\u002Furl in Go before 1.11.13 and 1.12.x before 1.12.8 m...","CVE-2019-14809, CVE-2019-14809 vulnerability, CVE-2019-14809 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, golang security, debian security, go vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-14809",{"@context":119,"@type":120,"headline":114,"description":115,"datePublished":10,"dateModified":11,"author":121,"publisher":125,"about":129,"mainEntityOfPage":133,"articleSection":136,"keywords":137},"https:\u002F\u002Fschema.org","TechArticle",{"@type":122,"name":123,"url":124},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":122,"name":123,"url":124,"logo":126},{"@type":127,"url":128},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":130,"name":6,"description":131,"additionalType":132},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":134,"@id":135},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-14809","Cybersecurity","CVE-2019-14809, CVE-2019-14809 vulnerability, CVE-2019-14809 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[139,151],{"Operator":15,"Negate":15,"Nodes":140},[141],{"Operator":142,"Negate":15,"CPEMatch":143},"OR",[144,147],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":145,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":146,"VersionEndIncluding":15},"BBD0F192-5A67-48E9-9C1E-4A23148A3837","1.11.13",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":15},"AFE73A16-798B-477F-923E-E0F9A4BE63F5","1.12.0","1.12.8",{"Operator":15,"Negate":15,"Nodes":152},[153],{"Operator":142,"Negate":15,"CPEMatch":154},[155],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[],{"lastModified":11,"cacheTime":160,"version":33},1792265269385,{"score":162,"band":163,"action":164,"scoredAt":165},54,"Medium","Plan remediation","2026-10-16T06:46:39.747324+00:00"]