Lucene search
K

13 matches found

Tenable Nessus
Tenable Nessus
added 2024/01/27 12:0 a.m.31 views

FreeBSD : rclone -- Multiple vulnerabilities (b5e22ec5-bc4b-11ee-b0b5-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b5e22ec5-bc4b-11ee-b0b5-b42e991fc52e advisory. - A race condition in go-resty can result in HTTP request body disclosure across requests. Thi...

5.9CVSS7.3AI score0.54214EPSS
Exploits4References5
Veracode
Veracode
added 2023/11/29 12:3 p.m.19 views

Race Condition

github.com/go-resty/resty/ is vulnerable to Race condition. The vulnerability is due to calling sync.pool. The vulnerability arises due to improper handling of buffer reset functionality, wherein the buffer gets embedded with a request body and gets appended to current HTTP request body. Any...

5.9CVSS7.2AI score0.00369EPSS
Exploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2023/11/29 10:29 a.m.24 views

CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

4.7CVSS7.1AI score0.00369EPSS
Exploits1References3
OSV
OSV
added 2023/11/28 5:36 p.m.12 views

GHSA-XWH9-GC39-5298 github.com/go-resty/resty/v2 HTTP request body disclosure

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS5.2AI score0.00369EPSS
Exploits1References8
Github Security Blog
Github Security Blog
added 2023/11/28 5:36 p.m.12 views

github.com/go-resty/resty/v2 HTTP request body disclosure

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS7AI score0.00369EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2023/11/28 5:15 p.m.18 views

CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS7AI score
Exploits0References5
NVD
NVD
added 2023/11/28 5:15 p.m.8 views

CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS0.00369EPSS
Exploits1References5
Prion
Prion
added 2023/11/28 5:15 p.m.19 views

Race condition

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

2.6CVSS6.8AI score0.00369EPSS
Exploits1References5Affected Software1
UbuntuCve
UbuntuCve
added 2023/11/28 5:15 p.m.16 views

CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS6.1AI score0.00369EPSS
Exploits1References5
Cvelist
Cvelist
added 2023/11/28 4:31 p.m.23 views

CVE-2023-45286 HTTP request body disclosure in github.com/go-resty/resty/v2

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.8AI score0.00369EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2023/11/28 4:31 p.m.11 views

CVE-2023-45286 HTTP request body disclosure in github.com/go-resty/resty/v2

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

6.6AI score0.00369EPSS
Exploits1References5
CVE
CVE
added 2023/11/28 4:31 p.m.1315 views

CVE-2023-45286

CVE-2023-45286 concerns a race condition in the Go HTTP client library go-resty/resty/v2. When request retries are enabled, calling sync.Pool.Put on the same bytes.Buffer more than once may yield a buffer that hasn’t been Reset, causing the HTTP request body from a prior request to be appended to...

5.9CVSS5.9AI score0.00369EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2023/11/27 6:53 p.m.17 views

GO-2023-2328 HTTP request body disclosure in github.com/go-resty/resty/v2

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS5.2AI score0.00369EPSS
Exploits1References4
Rows per page
Query Builder