CVE-2024-34084
2 advisories.
Go/github.com/stacklok/minder CVE-2024-34084: high 7.5, EPSS 0.59%
Minder's GitHub Webhook Handler vulnerable to DoS from un-validated requests
Action: Upgrade github.com/stacklok/minder to 0.0.48 or later.
go get github.com/stacklok/minder@v0.0.48Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.48 | - |
Fixed versions
| 0.0.48 |
Sources
- osv: GHSA-9c5w-9q3f-3hv7
- https://github.com/stacklok/minder/security/advisories/GHSA-9c5w-9q3f-3hv7
- https://nvd.nist.gov/vuln/detail/CVE-2024-34084
- https://github.com/stacklok/minder/commit/3e5a527d2f1b535159206161d1d519602c75bd0d
- https://github.com/stacklok/minder
- https://github.com/stacklok/minder/blob/ee66f6c0763212503c898cfefb65ce1450c7f5ac/internal/controlplane/handlers_githubwebhooks.go#L213-L218
- https://github.com/stacklok/minder/blob/ee66f6c0763212503c898cfefb65ce1450c7f5ac/internal/controlplane/handlers_githubwebhooks.go#L337-L342
- https://github.com/stacklok/minder/blob/ee66f6c0763212503c898cfefb65ce1450c7f5ac/internal/controlplane/handlers_githubwebhooks.go#L367-L377
- https://github.com/stacklok/minder/blob/ee66f6c0763212503c898cfefb65ce1450c7f5ac/internal/controlplane/handlers_githubwebhooks_test.go#L278-L283
CVE-2024-34084 · published · modified · JSON
Go/github.com/stacklok/minder CVE-2024-34084: unknown, EPSS 0.59%
Denial of Service from untrusted requests in github.com/stacklok/minder
Action: Upgrade github.com/stacklok/minder to 0.0.48 or later.
go get github.com/stacklok/minder@v0.0.48Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.48 | - |
Fixed versions
| 0.0.48 |
Sources
- osv: GO-2024-2821
- https://github.com/stacklok/minder/security/advisories/GHSA-9c5w-9q3f-3hv7
- https://github.com/stacklok/minder/commit/3e5a527d2f1b535159206161d1d519602c75bd0d
- https://github.com/stacklok/minder/blob/ee66f6c0763212503c898cfefb65ce1450c7f5ac/internal/controlplane/handlers_githubwebhooks.go#L213-L218
- https://github.com/stacklok/minder/blob/ee66f6c0763212503c898cfefb65ce1450c7f5ac/internal/controlplane/handlers_githubwebhooks.go#L337-L342
- https://github.com/stacklok/minder/blob/ee66f6c0763212503c898cfefb65ce1450c7f5ac/internal/controlplane/handlers_githubwebhooks.go#L367-L377
- https://github.com/stacklok/minder/blob/ee66f6c0763212503c898cfefb65ce1450c7f5ac/internal/controlplane/handlers_githubwebhooks_test.go#L278-L283
CVE-2024-34084 · published · modified · JSON