CVE-2020-24707

Mô tả

Tham khảo

• gophish/gophish commit b25f5ac · Patch
• gophish/gophish release v0.11.0 · Third Party Advisory
• herolab.usd.de/security-advisories/usd-2020-0052 · Exploit

Lỗ hổng khác của gophish

• CVE-2025-70963CAO 7.6Gophish <=0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly ins…
• CVE-2024-2211TRUNG BÌNH 6.1Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacker to store a malicio…
• CVE-2022-45004TRUNG BÌNH 6.1Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.
• CVE-2022-45003CAO 7.5Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.
• CVE-2022-25295TRUNG BÌNH 5.4This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The a…