GO-2023-1795
Dashboard / Vulnerabilities / GO-2023-1795
Summary: malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor
Details: malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor
References: https://github.com/sigstore/rekor/security/advisories/GHSA-frqx-jfcm-6jjr, https://nvd.nist.gov/vuln/detail/CVE-2023-33199, https://github.com/sigstore/rekor/commit/140c5add105179e5ffd9e3e114fd1b6b93aebbd4
Affected packages
Package
Name: github.com/sigstore/rekor
Purl: pkg:golang/github.com/sigstore/rekor
Affected ranges
Type: SEMVER
Events:
Introduced- 0
Fixed -1.2.0
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
