Gophish vulnerable to Server-Side Request Forgery

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-24710 · ADVISORY
• gophish/gophish commit e3352f4 · WEB
• gophish/gophish · PACKAGE
• gophish/gophish release v0.11.0 · WEB
• herolab.usd.de/security-advisories/usd-2020-0054 · WEB
• herolab.usd.de/security-advisories/usd-2020-0054 · Exploit
• GitHub Advisory GHSA-9c9w-9pq7-f35h · ADVISORY

Lỗ hổng khác của github.com/gophish/gophish

• CVE-2026-39904TRUNG BÌNH 6.5Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memor…
• CVE-2025-70963CAO 7.6Gophish <=0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly ins…
• CVE-2024-55196CAO 7.5Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords fo…
• CVE-2022-45004TRUNG BÌNH 6.1Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.
• CVE-2022-45003CAO 7.5Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.