GO-2023-2077

    Dashboard / Vulnerabilities / GO-2023-2077

    GO-2023-2077

    Published: 2 Oct 2023Last Modified: 20 May 2024

    Summary: Authentication bypass in github.com/sagernet/sing

    Details: Authentication bypass in github.com/sagernet/sing

    References: https://github.com/SagerNet/sing-box/security/advisories/GHSA-r5hm-mp3j-285g, https://github.com/SagerNet/sing/commit/5b05b5c147d9650e8accb4441e216c72a61f4859

    Affected packages

    Package

    Name: github.com/sagernet/sing

    Purl: pkg:golang/github.com/sagernet/sing

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -0.2.12-0.20230925092853-5b05b5c147d9

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GO-2023-2077 | CVE-DB