CVE-2023-28609

Go/github.com/ansible-semaphore/semaphore CVE-2023-28609: critical 9.8, EPSS 0.87%

Ansible Semaphore mishandles authentication

Action: Upgrade github.com/ansible-semaphore/semaphore to 2.8.89 or later.

go get github.com/ansible-semaphore/semaphore@v2.8.89

Affected

Fixed versions

Sources

• osv: GHSA-pmhg-cmjc-3875
• https://nvd.nist.gov/vuln/detail/CVE-2023-28609
• https://github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1
• https://github.com/ansible-semaphore/semaphore
• https://github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89

CVE-2023-28609 · published 2023-03-18T21:30:23Z · modified 2023-11-08T04:12:12.441846Z · JSON