Go/sftpgo CVE-2024-52309: medium 5.1, EPSS 0.63%

SFTPGo allows administrators to restrict command execution from the EventManager

Action: Upgrade sftpgo to 2.6.3 or later.

go get sftpgo@v2.6.3

Affected

Fixed versions

Sources

• osv: GHSA-49cc-xrjf-9qf7#Go/sftpgo
• nvd: CVE-2024-52309
• https://github.com/drakkan/sftpgo/security/advisories/GHSA-49cc-xrjf-9qf7
• https://github.com/drakkan/sftpgo/commit/88b1850b5806eee81150873d4e565144b21021fb
• https://github.com/drakkan/sftpgo/commit/b524da11e9466d05fe03304713ee1c61bb276ec4
• https://github.com/drakkan/sftpgo
• https://pkg.go.dev/vuln/GO-2024-3283

CVE-2024-52309 · published 2024-11-21T23:19:07Z · modified 2024-12-02T18:04:00Z · JSON