CVE-2023-27582
2 advisories.
Go/github.com/foxcpp/maddy CVE-2023-27582: critical 9.1, EPSS 1.02%
Full authentication bypass if SASL authorization username is specified
Action: Upgrade github.com/foxcpp/maddy to 0.6.3 or later.
go get github.com/foxcpp/maddy@v0.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 0.6.3 | - |
Fixed versions
| 0.6.3 |
Sources
- osv: GHSA-4g76-w3xw-2x6w
- https://github.com/foxcpp/maddy/security/advisories/GHSA-4g76-w3xw-2x6w
- https://nvd.nist.gov/vuln/detail/CVE-2023-27582
- https://github.com/foxcpp/maddy/commit/55a91a37b71210f34f98f4d327c30308fe24399a
- https://github.com/foxcpp/maddy/commit/9f58cb64b39cdc01928ec463bdb198c4c2313a9c
- https://github.com/foxcpp/maddy
- https://github.com/foxcpp/maddy/releases/tag/v0.6.3
CVE-2023-27582 · published · modified · JSON
Go/github.com/foxcpp/maddy CVE-2023-27582: unknown, EPSS 1.02%
Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy
Action: Upgrade github.com/foxcpp/maddy to 0.6.3 or later.
go get github.com/foxcpp/maddy@v0.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 0.6.3 | - |
Fixed versions
| 0.6.3 |
Sources
- osv: GO-2023-1630
- https://github.com/foxcpp/maddy/security/advisories/GHSA-4g76-w3xw-2x6w
- https://nvd.nist.gov/vuln/detail/CVE-2023-27582
- https://github.com/foxcpp/maddy/commit/55a91a37b71210f34f98f4d327c30308fe24399a
- https://github.com/foxcpp/maddy/commit/9f58cb64b39cdc01928ec463bdb198c4c2313a9c
- https://github.com/foxcpp/maddy/releases/tag/v0.6.3
CVE-2023-27582 · published · modified · JSON