Go/github.com/tobychui/zoraxy CVE-2024-52010: unknown 0, EPSS 1.50%
Zoraxy has an authenticated command injection in the Web SSH feature
Action: Upgrade github.com/tobychui/zoraxy to 3.1.3 or later.
go get github.com/tobychui/zoraxy@v3.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.6.1 | 3.1.3 | - |
Fixed versions
| 3.1.3 |
Sources
- osv: GHSA-7hpf-g48v-hw3j
- https://github.com/tobychui/zoraxy/security/advisories/GHSA-7hpf-g48v-hw3j
- https://nvd.nist.gov/vuln/detail/CVE-2024-52010
- https://github.com/tobychui/zoraxy/commit/2e9bc77a5d832bff1093058d42ce7a61382e4bc6
- https://github.com/tobychui/zoraxy/commit/c07d5f85dfc37bd32819358ed7d4bc32c604e8f0
- https://github.com/tobychui/zoraxy
- https://pkg.go.dev/vuln/GO-2024-3267
CVE-2024-52010 · published · modified · JSON