CVE-2022-45004

Gophish through 0.12.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted landing page...

CVE-2022-45003

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

CVE-2022-45003

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

Open Redirect

github.com/gophish/gophish is vulnerable to open redirect attacks. The vulnerability exists in the next query parameter in nextOrIndex function of route.go because the path extraction is not properly handled which allows an attacker to redirect users to arbitrary web URLs by tricking the victim t...

Gophish before 0.12.0 vulnerable to Open Redirect

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

GHSA-HVW3-P9PX-GPC9 Gophish before 0.12.0 vulnerable to Open Redirect

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

CVE-2022-25295

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

Open redirect

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

CVE-2022-25295

Open Redirect in Gophish before 0.12.0 (github.com/gophish/gophish). The vulnerability arises in the next parameter handling: the code parses r.FormValue("next") and redirects to a relative URL; if next begins with multiple backslashes (\\example.com), the browser can be redirected to http://exam...

CVE-2022-25295 Open Redirect

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

CVE-2022-25295 Open Redirect

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

CVE-2022-25295

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

PT-2022-17191 · Gophish · Gophish

Name of the Vulnerable Software and Affected Versions: gophish versions prior to 0.12.0 Description: The issue exists in the next query parameter, where the application uses url.Parser.FormValue"next" to extract the path and redirect the user to a relative URL. However, if the next parameter star...

Gophish 输入验证错误漏洞

Gophish is an open source phishing framework. A security vulnerability exists in Gophish versions prior to 0.12.0, which can be exploited by attackers to redirect users to a relative url...

GHSA-9C9W-9PQ7-F35H Gophish vulnerable to Server-Side Request Forgery

Gophish before 0.11.0 allows SSRF attacks...

Gophish vulnerable to Server-Side Request Forgery

Gophish before 0.11.0 allows SSRF attacks...

Gophish XSS Vulnerability

Gophish through 0.8.0 allows XSS via a username...

GHSA-9H9F-9Q8G-6764 Gophish XSS Vulnerability

Gophish through 0.8.0 allows XSS via a username...

Redcloud - Automated Red Team Infrastructure Deployement Using Docker

Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team Infrastructure using Docker. Harness the cloud's speed for your tools. Deploys in minutes. Use and manage it with its polished web interface. Ideal for your penetration tests, shooting ranges, red teaming and...

Clickjacking

github.com/gophish/gophish is vulnerable to clickjacking. An authenticated administrator can be successfully tricked into clicking a "Reset" button in the settings page which will cause their API key to be reset, resulting in a denial of service to the application...