Go/github.com/coredns/coredns CVE-2023-28452: medium 5.9, EPSS 0.61%

CoreDNS vulnerable to TuDoor Attacks

Action: Upgrade github.com/coredns/coredns to 1.11.0 or later.

go get github.com/coredns/coredns@v1.11.0

Affected

Fixed versions

Sources

• osv: GHSA-hfmw-7g3m-gj6q
• https://nvd.nist.gov/vuln/detail/CVE-2023-28452
• https://github.com/coredns/coredns/commit/604a902e2c7e0317aecaa3666124079c75a31573
• https://coredns.io
• https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba
• https://github.com/advisories/GHSA-hfmw-7g3m-gj6q
• https://github.com/coredns/coredns

CVE-2023-28452 · published 2024-09-18T15:30:52Z · modified 2026-09-10T03:50:18.191086126Z · JSON