Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:34 a.m.4 views

CVE-2024-41270

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version...

9.1CVSS6.8AI score0.00114EPSS
Exploits0References1
OSV
OSV
added 2024/08/19 5:26 p.m.8 views

GO-2024-3058 Gorush uses deprecated TLS versions in github.com/appleboy/gorush

An issue in the RunHTTPServer function in Gorush allows attackers to intercept and manipulate data due to the use of a deprecated TLS version...

9.1CVSS9.1AI score0.00114EPSS
Exploits0References4
Veracode
Veracode
added 2024/08/08 3:30 a.m.9 views

Data Interception And Manipulation

Gorush is vulnerable to Data Interception and Manipulation. The vulnerability is due to the use of a deprecated TLS version in the RunHTTPServer function within servernormal.go, which allows an attacker to intercept and manipulate data...

9.1CVSS6.6AI score0.00114EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/08/06 9:30 p.m.13 views

Gorush uses deprecated TLS versions

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version...

9.1CVSS6.8AI score0.00114EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/08/06 9:30 p.m.11 views

GHSA-P3PF-MFF8-3H47 Gorush uses deprecated TLS versions

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version...

6.9CVSS9.2AI score0.00114EPSS
Exploits0References5
NVD
NVD
added 2024/08/06 9:16 p.m.29 views

CVE-2024-41270

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version...

9.1CVSS0.00114EPSS
Exploits0References1
OSV
OSV
added 2024/08/06 9:16 p.m.7 views

CVE-2024-41270

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version...

9.1CVSS9.1AI score
Exploits0References1
CNNVD
CNNVD
added 2024/08/06 12:0 a.m.1 views

Gorush 安全漏洞

Gorush is a push notification server written in Go by Bo-Yi Wu, an individual developer. A security vulnerability exists in Gorush v1.18.4, which stems from the use of a deprecated version of TLS in the RunHTTPServer function. An attacker can use this vulnerability to intercept and manipulate dat...

9.1CVSS6.5AI score0.00114EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/06 12:0 a.m.12 views

CVE-2024-41270

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version...

6.9AI score0.00114EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/06 12:0 a.m.11 views

CVE-2024-41270

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version...

0.00114EPSS
Exploits0References1
CVE
CVE
added 2024/08/06 12:0 a.m.35 views

CVE-2024-41270

CVE-2024-41270 affects Gorush (RunHTTPServer) in v1.18.4. The issue arises from using a deprecated TLS version, enabling an attacker to intercept and manipulate data. The connected sources (Red Hat, OSV, GHSA, Veracode, NVD, and related catalogs) consistently describe the same root cause and impa...

9.1CVSS6.9AI score0.00114EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder