GitHub Advisoryadvisory · Go
GHSA-8gg8-wr4j-v2wr Gophish vulnerable to Denial of Service via crafted payload involving autofocus
HIGH
Official page ↗
- Aliases
- CVE-2022-45003
- Ecosystem
- Go
- Packages
- github.com/gophish/gophish
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400
- Reviewed
- 2023-03-22
Affected packages
• Go github.com/gophish/gophish: <= 0.12.1 (no fix yet)
Description
Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.
Related
Alias · CVE (1)
- CVE-2022-45003 Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus. vulnerability
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness