Go/github.com/IceWhaleTech/CasaOS-UserService CVE-2024-24765: unknown, EPSS 0.97%

Path traversal and user privilege escalation in github.com/IceWhaleTech/CasaOS-UserService

Action: Upgrade github.com/IceWhaleTech/CasaOS-UserService to 0.4.7 or later.

go get github.com/IceWhaleTech/CasaOS-UserService@v0.4.7

Affected

Fixed versions

Sources

• osv: GO-2024-2616
• https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-h5gf-cmm8-cg7c
• https://github.com/IceWhaleTech/CasaOS-UserService/commit/3f4558e23c0a9958f9a0e20aabc64aa8fd51840e
• https://github.com/IceWhaleTech/CasaOS-UserService/releases/tag/v0.4.7

CVE-2024-24765 · published 2024-03-11T20:09:34Z · modified 2024-05-20T16:03:47Z · JSON