Open dev-mend-for-github-com[bot] opened 2 years ago
Open-Source Phishing Toolkit
Dependency Hierarchy: - :x: **github.com/gophish/gophish-v0.1.2** (Vulnerable Library)
Found in HEAD commit: 69a84c862836bec3e4be9a461b9e320cda5aeb94
Found in base branch: master
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
Publish Date: 2020-10-28
URL: CVE-2020-24713
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: None - Availability Impact: None
CVE-2020-24713 - High Severity Vulnerability
Open-Source Phishing Toolkit
Dependency Hierarchy: - :x: **github.com/gophish/gophish-v0.1.2** (Vulnerable Library)
Found in HEAD commit: 69a84c862836bec3e4be9a461b9e320cda5aeb94
Found in base branch: master
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
Publish Date: 2020-10-28
URL: CVE-2020-24713
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: None - Availability Impact: None
For more information on CVSS3 Scores, click here.