GHSA-9h9f-9q8g-6764
Dashboard / Vulnerabilities / GHSA-9h9f-9q8g-6764
GHSA-9h9f-9q8g-6764
Published: 24 May 2022Last Modified: 20 Aug 2024
Aliases:
Summary: Gophish XSS Vulnerability
Details: Gophish through 0.8.0 allows XSS via a username.
References: https://nvd.nist.gov/vuln/detail/CVE-2019-16146, https://github.com/gophish/gophish/pull/1547, https://github.com/gophish/gophish/commit/24fe998a3aa04e205900476a9601d481e94d8eea
Affected packages
Package
Name: github.com/gophish/gophish
Purl: pkg:golang/github.com/gophish/gophish
Affected ranges
Type: SEMVER
Events:
Introduced- 0
Fixed -0.9.0
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
