CVE-2020-24711

2020-10-2820:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.6%

JSON

The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack

CPENameOperatorVersion
gophisheq0.8.0
gophisheq0.7.1
gophisheq0.10.0
gophisheq0.9.0
gophisheq0.7.0
gophisheq0.5.0
gophisheq0.1.1
gophisheq0.10.1
gophisheq0.4.0
gophisheq0.6.0

Name	Operator	Version
gophish	eq	0.8.0
gophish	eq	0.7.1
gophish	eq	0.10.0
gophish	eq	0.9.0
gophish	eq	0.7.0
gophish	eq	0.5.0
gophish	eq	0.1.1
gophish	eq	0.10.1
gophish	eq	0.4.0
gophish	eq	0.6.0

Rows per page:

1-10 of 141

References

github.com/gophish/gophish/commit/6df62e85fd60f0931d3c8bfdb13b436a961bc9b6

github.com/gophish/gophish/releases/tag/v0.11.0

herolab.usd.de/security-advisories/usd-2020-0051/