Go/github.com/tobychui/zoraxy CVE-2024-52010: high 8.6, EPSS 1.50%
Zoraxy has an authenticated command injection in the Web SSH feature in github.com/tobychui/zoraxy
Action: Upgrade github.com/tobychui/zoraxy to 3.1.3+incompatible or later.
go get github.com/tobychui/zoraxy@v3.1.3+incompatibleAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.3+incompatible | - |
Fixed versions
| 3.1.3+incompatible |
Sources
- osv: GO-2024-3267
- nvd: CVE-2024-52010
- https://github.com/tobychui/zoraxy/security/advisories/GHSA-7hpf-g48v-hw3j
- https://github.com/tobychui/zoraxy/commit/2e9bc77a5d832bff1093058d42ce7a61382e4bc6
- https://github.com/tobychui/zoraxy/commit/c07d5f85dfc37bd32819358ed7d4bc32c604e8f0
CVE-2024-52010 · published · modified · JSON