Go/github.com/projectcapsule/capsule-proxy CVE-2023-48312: unknown, EPSS 0.57%
Capsule Proxy Authentication bypass using an empty token in github.com/projectcapsule/capsule-proxy
Action: Upgrade github.com/projectcapsule/capsule-proxy to 0.4.6 or later.
go get github.com/projectcapsule/capsule-proxy@v0.4.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.6 | - |
Fixed versions
| 0.4.6 |
Sources
- osv: GO-2023-2351
- https://github.com/projectcapsule/capsule-proxy/security/advisories/GHSA-fpvw-6m5v-hqfp
- https://nvd.nist.gov/vuln/detail/CVE-2023-48312
- https://github.com/projectcapsule/capsule-proxy/commit/472404f7006a4152e4eec76dee07324dd1e6e823
CVE-2023-48312 · published · modified · JSON