tocsin

CVE-2023-33189

2 advisories.

Go/github.com/pomerium/pomerium CVE-2023-33189: critical 10

Pomerium vulnerable to Incorrect Authorization with specially crafted requests

Action: Upgrade github.com/pomerium/pomerium to 0.17.4 or later.

go get github.com/pomerium/pomerium@v0.22.2
go get github.com/pomerium/pomerium@v0.21.4
go get github.com/pomerium/pomerium@v0.20.1
go get github.com/pomerium/pomerium@v0.19.2
go get github.com/pomerium/pomerium@v0.18.1
go get github.com/pomerium/pomerium@v0.17.4

Affected

introducedfixedlast affected
0.22.00.22.2-
0.21.00.21.4-
0.20.00.20.1-
0.19.00.19.2-
0.18.00.18.1-
00.17.4-

Fixed versions

0.22.20.21.40.20.10.19.20.18.10.17.4

Sources

CVE-2023-33189 · published · modified · JSON

Go/github.com/pomerium/pomerium CVE-2023-33189: unknown

Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

Action: Upgrade github.com/pomerium/pomerium to 0.17.4 or later.

go get github.com/pomerium/pomerium@v0.17.4
go get github.com/pomerium/pomerium@v0.18.1
go get github.com/pomerium/pomerium@v0.19.2
go get github.com/pomerium/pomerium@v0.20.1
go get github.com/pomerium/pomerium@v0.21.4
go get github.com/pomerium/pomerium@v0.22.2

Affected

introducedfixedlast affected
00.17.4-
0.18.00.18.1-
0.19.00.19.2-
0.20.00.20.1-
0.21.00.21.4-
0.22.00.22.2-

Fixed versions

0.17.40.18.10.19.20.20.10.21.40.22.2

Sources

CVE-2023-33189 · published · modified · JSON