Go/github.com/projectdiscovery/interactsh CVE-2023-36474: medium 6.1, EPSS 0.54%

Subdomain Takeover in Interactsh server

Action: Upgrade github.com/projectdiscovery/interactsh to 1.0.0 or later.

go get github.com/projectdiscovery/interactsh@v1.0.0

Affected

Fixed versions

Sources

• osv: GHSA-m36x-mgfh-8g78
• https://github.com/projectdiscovery/interactsh/security/advisories/GHSA-m36x-mgfh-8g78
• https://nvd.nist.gov/vuln/detail/CVE-2023-36474
• https://github.com/projectdiscovery/interactsh/issues/136
• https://github.com/projectdiscovery/interactsh/pull/155
• https://github.com/projectdiscovery/interactsh
• https://labs.detectify.com/2014/10/21/hostile-subdomain-takeover-using-herokugithubdesk-more

CVE-2023-36474 · published 2022-01-27T15:15:25Z · modified 2026-09-10T03:49:10.822901400Z · JSON