tocsin

Go/github.com/coder/coder/v2 CVE-2024-58398: medium 4.3

Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect')

Action: Upgrade github.com/coder/coder/v2 to 2.14.4 or later.

go get github.com/coder/coder/v2@v2.16.1
go get github.com/coder/coder/v2@v2.15.3
go get github.com/coder/coder/v2@v2.14.4

Affected

introducedfixedlast affected
2.16.02.16.1-
2.15.02.15.3-
2.3.12.14.4-

Fixed versions

2.16.12.15.32.14.4

Sources

CVE-2024-58398 · published · modified · JSON