CVE-2023-37469
2 advisories.
Go/github.com/IceWhaleTech/CasaOS CVE-2023-37469: high 8.8, EPSS 1.58%
CasaOS Command Injection vulnerability
Action: Upgrade github.com/IceWhaleTech/CasaOS to 0.4.4 or later.
go get github.com/IceWhaleTech/CasaOS@v0.4.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.4 | - |
Fixed versions
| 0.4.4 |
Sources
- osv: GHSA-92vc-4fcw-g68q
- https://nvd.nist.gov/vuln/detail/CVE-2023-37469
- https://github.com/github/pe-security-lab/issues/1871
- https://github.com/IceWhaleTech/CasaOS/commit/af440eac5563644854ff33f72041e52d3fd1f47c
- https://github.com/IceWhaleTech/CasaOS
- https://github.com/IceWhaleTech/CasaOS/blob/96e92842357230098c771bc41fd3baf46189b859/route/v1/samba.go#L121
- https://github.com/IceWhaleTech/CasaOS/blob/96e92842357230098c771bc41fd3baf46189b859/service/connections.go#L58
- https://github.com/IceWhaleTech/CasaOS/releases/tag/v0.4.4
- https://securitylab.github.com/advisories/GHSL-2022-119_CasaOS
CVE-2023-37469 · published · modified · JSON
Go/github.com/IceWhaleTech/CasaOS CVE-2023-37469: unknown, EPSS 1.58%
CasaOS Command Injection vulnerability in github.com/IceWhaleTech/CasaOS
Action: Upgrade github.com/IceWhaleTech/CasaOS to 0.4.4 or later.
go get github.com/IceWhaleTech/CasaOS@v0.4.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.4 | - |
Fixed versions
| 0.4.4 |
Sources
- osv: GO-2023-2026
- https://github.com/advisories/GHSA-92vc-4fcw-g68q
- https://nvd.nist.gov/vuln/detail/CVE-2023-37469
- https://securitylab.github.com/advisories/GHSL-2022-119_CasaOS
- https://github.com/IceWhaleTech/CasaOS/commit/af440eac5563644854ff33f72041e52d3fd1f47c
- https://github.com/IceWhaleTech/CasaOS/blob/96e92842357230098c771bc41fd3baf46189b859/route/v1/samba.go#L121
- https://github.com/IceWhaleTech/CasaOS/blob/96e92842357230098c771bc41fd3baf46189b859/service/connections.go#L58
- https://github.com/IceWhaleTech/CasaOS/releases/tag/v0.4.4
CVE-2023-37469 · published · modified · JSON