CVE-2023-45128

🗓️ 16 Oct 2023 20:45:07Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 85 Views

Fiber web framework Go, CSRF vulnerability allows arbitrary value injection, addressed in v2.50.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-45128	17 Oct 202300:32	–	circl
CNNVD	Fiber Security Breach	16 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-45128 CSRF Token Reuse Vulnerability in fiber	16 Oct 202320:45	–	cvelist
EUVD	EUVD-2023-2708	3 Oct 202520:07	–	euvd
Github Security Blog	CSRF Token Reuse Vulnerability	17 Oct 202312:40	–	github
NVD	CVE-2023-45128	16 Oct 202321:15	–	nvd
OSV	CVE-2023-45128 CSRF Token Reuse Vulnerability in fiber	16 Oct 202320:45	–	osv
OSV	GHSA-94W9-97P3-P368 CSRF Token Reuse Vulnerability	17 Oct 202312:40	–	osv
OSV	GO-2023-2115 CSRF token reuse vulnerability in github.com/gofiber/fiber/v2	24 Oct 202316:57	–	osv
Prion	Cross site request forgery (csrf)	16 Oct 202321:15	–	prion

NVD

Vulners

Node

gofiber fiberRange<2.50.0go

[
  {
    "vendor": "gofiber",
    "product": "fiber",
    "versions": [
      {
        "version": "< 2.50.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/gofiber/fiber/commit/8c3916dbf4ad2ed427d02c6eb63ae8b2fa8f019a
github	www.github.com/gofiber/fiber/security/advisories/GHSA-94w9-97p3-p368

21 Nov 2024 08:26Current

9.4High risk

Vulners AI Score9.4

CVSS 3.18.8 - 10

EPSS0.00155

SSVC

fiber web framework go csrf vulnerability injection security integrity upgrade samesite secure httponly