Go/github.com/cubefs/cubefs CVE-2023-46738: medium 6.5, EPSS 0.56%
Authenticated users can crash the CubeFS servers with maliciously crafted requests
Action: Upgrade github.com/cubefs/cubefs to 3.3.1 or later.
go get github.com/cubefs/cubefs@v3.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.1 | - |
Fixed versions
| 3.3.1 |
Sources
- osv: GHSA-qc6v-g3xw-grmx
- https://github.com/cubefs/cubefs/security/advisories/GHSA-qc6v-g3xw-grmx
- https://nvd.nist.gov/vuln/detail/CVE-2023-46738
- https://github.com/cubefs/cubefs/commit/dd46c24873c8f3df48d0a598b704ef9bd24b1ec1
- https://github.com/cubefs/cubefs
CVE-2023-46738 · published · modified · JSON