CVE-2022-25295

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

Open redirect

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

CVE-2022-25295

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

CVE-2022-25295 Open Redirect

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

CVE-2022-25295

Open Redirect in Gophish before 0.12.0 (github.com/gophish/gophish). The vulnerability arises in the next parameter handling: the code parses r.FormValue("next") and redirects to a relative URL; if next begins with multiple backslashes (\\example.com), the browser can be redirected to http://exam...

CVE-2022-25295 Open Redirect

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

CVE-2022-25295

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

PT-2022-17191 · Gophish · Gophish

Name of the Vulnerable Software and Affected Versions: gophish versions prior to 0.12.0 Description: The issue exists in the next query parameter, where the application uses url.Parser.FormValue"next" to extract the path and redirect the user to a relative URL. However, if the next parameter star...

Gophish 输入验证错误漏洞

Gophish is an open source phishing framework. A security vulnerability exists in Gophish versions prior to 0.12.0, which can be exploited by attackers to redirect users to a relative url...

CVE-2022-25295: URL Redirection to Untrusted Site

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

Gophish vulnerable to Server-Side Request Forgery

Gophish before 0.11.0 allows SSRF attacks...

GHSA-9C9W-9PQ7-F35H Gophish vulnerable to Server-Side Request Forgery

Gophish before 0.11.0 allows SSRF attacks...

Gophish XSS Vulnerability

Gophish through 0.8.0 allows XSS via a username...

GHSA-9H9F-9Q8G-6764 Gophish XSS Vulnerability

Gophish through 0.8.0 allows XSS via a username...

Redcloud - Automated Red Team Infrastructure Deployement Using Docker

Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team Infrastructure using Docker. Harness the cloud's speed for your tools. Deploys in minutes. Use and manage it with its polished web interface. Ideal for your penetration tests, shooting ranges, red teaming and...

Clickjacking

github.com/gophish/gophish is vulnerable to clickjacking. An authenticated administrator can be successfully tricked into clicking a "Reset" button in the settings page which will cause their API key to be reset, resulting in a denial of service to the application...

Gophish cookie non-expiration vulnerability

Gophish is a powerful open source phishing framework. A cookie non-expiration vulnerability exists in Gophish 0.10.1 and earlier versions. The vulnerability stems from Gophish not invalidating the gophish cookie after logging out. No details of the vulnerability are provided at this time...

Gophish Cross-Site Scripting Vulnerability

Gophish is a powerful open source phishing framework. A cross-site scripting vulnerability exists in Gophish versions prior to 0.11.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "IMAP Host" field on the account settings page...

Gophish denial of service vulnerability

Gophish is a powerful open source phishing framework. A denial of service vulnerability exists in the "Reset" button on the "Account Settings" page in Gophish versions prior to 0.11.0. This vulnerability can be exploited to cause a denial of service via a clickjacking attack...

Gophish Server-Side Cross-Site Request Forgery Vulnerability

Gophish is a powerful open source phishing framework. A server-side cross-site request forgery vulnerability exists in Gophish versions prior to 0.11.0. No detailed vulnerability details are provided at this time...