Lucene search
K

11 matches found

OSV
OSV
added 2024/08/24 10:15 p.m.13 views

CVE-2024-8135

A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310. Affected is the function Sign of the file pkg/token/token.go. The manipulation of the argument config.key leads to hard-coded credentials. Continious delivery with rolling...

9.8CVSS7AI score
Exploits0References6
NVD
NVD
added 2024/08/24 10:15 p.m.10 views

CVE-2024-8135

A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310. Affected is the function Sign of the file pkg/token/token.go. The manipulation of the argument config.key leads to hard-coded credentials. Continious delivery with rolling...

9.8CVSS0.00159EPSS
Exploits0References6
CVE
CVE
added 2024/08/24 9:31 p.m.47 views

CVE-2024-8135

Summary: CVE-2024-8135 affects Go-Tribe gotribe (up to commit cd3ccd32...) with a vulnerability in the Sign function of pkg/token/token.go. The issue arises from manipulation of the config.key argument, which leads to hard-coded credentials. Reported in multiple feeds, the product uses continuous...

9.8CVSS6.5AI score0.00159EPSS
Exploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/24 9:31 p.m.9 views

CVE-2024-8135 Go-Tribe gotribe token.go Sign hard-coded credentials

A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310. Affected is the function Sign of the file pkg/token/token.go. The manipulation of the argument config.key leads to hard-coded credentials. Continious delivery with rolling...

6.3CVSS7AI score0.00159EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/08/24 12:0 a.m.2 views

gotribe 信任管理问题漏洞

gotribe is gotribe open source a small cms solution for Go + Vue development. A trust management issue vulnerability exists in gotribe, which stems from the fact that manipulation of the parameter config.key results in hard-coded credentials...

9.8CVSS6.5AI score0.00159EPSS
Exploits0References7
NVD
NVD
added 2024/08/20 2:15 p.m.7 views

CVE-2024-8003

A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log Handler. The manipulation leads to deserialization. The patch is identified as...

9.8CVSS0.00473EPSS
Exploits1References6
OSV
OSV
added 2024/08/20 2:15 p.m.9 views

CVE-2024-8003

A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log Handler. The manipulation leads to deserialization. The patch is identified as...

9.8CVSS6.8AI score
Exploits0References6
CVE
CVE
added 2024/08/20 1:31 p.m.46 views

CVE-2024-8003

Go-Tribe gotribe-admin 1.0 Log Handler's InitRoutes (internal/app/routes/routes.go) has a deserialization flaw. The issue is fixed by patch ID 45ac90d6d1f82716f77dbcdf8e7309c229080e3c; apply the patch or disable InitRoutes as a temporary workaround. Affected products and exact root cause are docu...

9.8CVSS4AI score0.00473EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2024/08/20 1:31 p.m.16 views

CVE-2024-8003 Go-Tribe gotribe-admin Log routes.go InitRoutes deserialization

A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log Handler. The manipulation leads to deserialization. The patch is identified as...

5.1CVSS0.00473EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2024/08/20 1:31 p.m.8 views

CVE-2024-8003 Go-Tribe gotribe-admin Log routes.go InitRoutes deserialization

A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log Handler. The manipulation leads to deserialization. The patch is identified as...

5.1CVSS7.1AI score0.00473EPSS
Exploits1References6
CNNVD
CNNVD
added 2024/08/20 12:0 a.m.1 views

gotribe-admin 安全漏洞

gotribe-admin is a Go + Vue developed small cms solution by gotribe open source. A security vulnerability exists in gotribe-admin version 1.0, which stems from the function InitRoutes in the file internal/app/routes/routes.go that causes deserialization...

9.8CVSS4.8AI score0.00473EPSS
Exploits1References7
Rows per page
Query Builder