CVE-2023-29401

CVE-2023-29401 is a medium-severity vulnerability affecting the gin-gonic gin framework, specifically within the Context.FileAttachment function. It allows an attacker to manipulate the Content-Disposition header by providing a maliciously crafted filename, potentially causing files to be served with an unexpected name. The vulnerability has a CVSS score of 4.3 (medium) due to its network attack vector and low attack complexity, but it requires user interaction and only impacts integrity (low). There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.