CVE-2024-39315
2 advisories.
Go/github.com/pomerium/pomerium CVE-2024-39315: medium 5.7, EPSS 0.42%
Pomerium exposed OAuth2 access and ID tokens in user info endpoint response
Action: Upgrade github.com/pomerium/pomerium to 0.26.1 or later.
go get github.com/pomerium/pomerium@v0.26.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.26.1 | - |
Fixed versions
| 0.26.1 |
Sources
- osv: GHSA-rrqr-7w59-637v
- https://github.com/pomerium/pomerium/security/advisories/GHSA-rrqr-7w59-637v
- https://nvd.nist.gov/vuln/detail/CVE-2024-39315
- https://github.com/pomerium/pomerium/commit/4c7c4320afb2ced70ba19b46de1ac4383f3daa48
- https://github.com/pomerium/pomerium
CVE-2024-39315 · published · modified · JSON
Go/github.com/pomerium/pomerium CVE-2024-39315: unknown, EPSS 0.42%
Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium
Action: Upgrade github.com/pomerium/pomerium to 0.26.1 or later.
go get github.com/pomerium/pomerium@v0.26.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.26.1 | - |
Fixed versions
| 0.26.1 |
Sources
- osv: GO-2024-2965
- https://github.com/pomerium/pomerium/security/advisories/GHSA-rrqr-7w59-637v
- https://nvd.nist.gov/vuln/detail/CVE-2024-39315
- https://github.com/pomerium/pomerium/commit/4c7c4320afb2ced70ba19b46de1ac4383f3daa48
CVE-2024-39315 · published · modified · JSON