Go/github.com/gravitl/netmaker CVE-2023-32077: unknown, EPSS 3.53%
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker
Action: Upgrade github.com/gravitl/netmaker to 0.17.1 or later.
go get github.com/gravitl/netmaker@v0.17.1go get github.com/gravitl/netmaker@v0.18.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.1 | - |
| 0.18.0 | 0.18.6 | - |
Fixed versions
| 0.17.1 | 0.18.6 |
Sources
- osv: GO-2023-2022
- https://github.com/gravitl/netmaker/security/advisories/GHSA-8x8h-hcq8-jwwx
- https://nvd.nist.gov/vuln/detail/CVE-2023-32077
- https://github.com/gravitl/netmaker/commit/1621c27c1d176b639e9768b2acad7693e387fd51
- https://github.com/gravitl/netmaker/commit/9362c39a9a822f0e07361aa7c77af2610597e657
- https://github.com/gravitl/netmaker/pull/2170
CVE-2023-32077 · published · modified · JSON