Lucene search

GitHub Advisory DatabaseGHSA-8GG8-WR4J-V2WR

HistoryMar 22, 2023 - 9:30 p.m.

Gophish vulnerable to Denial of Service via crafted payload involving autofocus

2023-03-2221:30:16

GitHub Advisory Database

github.com

gophish

denial of service

autofocus

vulnerability

software

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

40.4%

JSON

Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.

Affected configurations

Vulners

Node

gophishgophishRange≤0.12.1

VendorProductVersionCPE
gophishgophish*cpe:2.3:a:gophish:gophish:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gophish	gophish	*	cpe:2.3:a:gophish:gophish::::::::

References

github.com/advisories/GHSA-8gg8-wr4j-v2wr

github.com/gophish/gophish/releases/tag/v0.12.1

nvd.nist.gov/vuln/detail/CVE-2022-45003

pastebin.com/z5MD3z8c

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

40.4%

JSON

Related for GHSA-8GG8-WR4J-V2WR