CVE-2023-26047
2 advisories.
Go/github.com/kitabisa/teler-waf CVE-2023-26047: medium 6.1, EPSS 0.52%
teler-waf contains detection rule bypass via Entities payload
Action: Upgrade github.com/kitabisa/teler-waf to 0.2.0 or later.
go get github.com/kitabisa/teler-waf@v0.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.0 | - |
Fixed versions
| 0.2.0 |
Sources
- osv: GHSA-p2pf-g8cq-3gq5
- https://github.com/kitabisa/teler-waf/security/advisories/GHSA-p2pf-g8cq-3gq5
- https://nvd.nist.gov/vuln/detail/CVE-2023-26047
- https://github.com/dwisiswant0/cwa-filter-rules/commit/d818d1645832d1a02cd210c7680e692d2bf4313b
- https://github.com/kitabisa/teler-waf/commit/6e1b0e19b8adc1bbc3513a986025d4adf88d59f8
- https://github.com/kitabisa/teler-waf
- https://github.com/kitabisa/teler-waf/compare/v0.1.2...v0.2.0
- https://github.com/kitabisa/teler-waf/releases/tag/v0.2.0
- https://pkg.go.dev/vuln/GO-2023-1600
CVE-2023-26047 · published · modified · JSON
Go/github.com/kitabisa/teler-waf CVE-2023-26047: unknown, EPSS 0.52%
Arbitrary code execution in github.com/kitabisa/teler-waf
Action: Upgrade github.com/kitabisa/teler-waf to 0.2.0 or later.
go get github.com/kitabisa/teler-waf@v0.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.0 | - |
Fixed versions
| 0.2.0 |
Sources
- osv: GO-2023-1600
- https://github.com/advisories/GHSA-p2pf-g8cq-3gq5
- https://github.com/kitabisa/teler-waf/commit/6e1b0e19b8adc1bbc3513a986025d4adf88d59f8
- https://github.com/kitabisa/teler-waf/releases/tag/v0.2.0
CVE-2023-26047 · published · modified · JSON