CVE-2024-41270

2024-08-0600:00:00

mitre

github.com

gorush v1.18.4

data interception

deprecated tls

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

39.6%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:appleboy:gorush:*:*:*:*:*:*:*:*"
    ],
    "vendor": "appleboy",
    "product": "gorush",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.18.4"
      }
    ],
    "defaultStatus": "unknown"
  }
]