CVE-2024-24767

2 advisories.

Go/github.com/IceWhaleTech/CasaOS-UserService CVE-2024-24767: high 7.3, EPSS 0.98%

CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability

Action: Upgrade github.com/IceWhaleTech/CasaOS-UserService to 0.4.7 or later.

go get github.com/IceWhaleTech/CasaOS-UserService@v0.4.7

Affected

introduced	fixed	last affected
0.4.4.3	0.4.7	-

Fixed versions

0.4.7

Sources

CVE-2024-24767 · published 2024-03-06T15:25:08Z · modified 2026-09-10T03:50:10.234120551Z · JSON

Go/github.com/IceWhaleTech/CasaOS-UserService CVE-2024-24767: unknown, EPSS 0.98%

Password brute force attack in github.com/IceWhaleTech/CasaOS-UserService

Action: Upgrade github.com/IceWhaleTech/CasaOS-UserService to 0.4.7 or later.

go get github.com/IceWhaleTech/CasaOS-UserService@v0.4.7

Affected

introduced	fixed	last affected
0.4.4-3-alpha1	0.4.7	-

Fixed versions

0.4.7

Sources

CVE-2024-24767 · published 2024-03-18T17:35:36Z · modified 2024-05-20T16:03:47Z · JSON