CVE-2024-43379
3 advisories.
Go/github.com/trufflesecurity/trufflehog/v3 CVE-2024-43379: low 3.4, EPSS 0.28%
Trufflehog vulnerable to Blind SSRF in some Detectors
Action: Upgrade github.com/trufflesecurity/trufflehog/v3 to 3.81.9 or later.
go get github.com/trufflesecurity/trufflehog/v3@v3.81.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.81.9 | - |
Fixed versions
| 3.81.9 |
Sources
- osv: GHSA-3r74-v83p-f4f4
- https://github.com/trufflesecurity/trufflehog/security/advisories/GHSA-3r74-v83p-f4f4
- https://nvd.nist.gov/vuln/detail/CVE-2024-43379
- https://github.com/trufflesecurity/trufflehog/commit/fe5624c70923355128868cffd647b6e2cfe11443
- https://github.com/trufflesecurity/trufflehog
CVE-2024-43379 · published · modified · JSON
Go/github.com/trufflesecurity/trufflehog CVE-2024-43379: unknown, EPSS 0.28%
Trufflehog vulnerable to Blind SSRF in some Detectors in github.com/trufflesecurity/trufflehog
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-3076
- https://github.com/trufflesecurity/trufflehog/security/advisories/GHSA-3r74-v83p-f4f4
- https://nvd.nist.gov/vuln/detail/CVE-2024-43379
- https://github.com/trufflesecurity/trufflehog/commit/fe5624c70923355128868cffd647b6e2cfe11443
CVE-2024-43379 · published · modified · JSON
Go/github.com/trufflesecurity/trufflehog/v3 CVE-2024-43379: unknown, EPSS 0.28%
Trufflehog vulnerable to Blind SSRF in some Detectors in github.com/trufflesecurity/trufflehog
Action: Upgrade github.com/trufflesecurity/trufflehog/v3 to 3.81.9 or later.
go get github.com/trufflesecurity/trufflehog/v3@v3.81.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.81.9 | - |
Fixed versions
| 3.81.9 |
Sources
- osv: GO-2024-3076#Go/github.com/trufflesecurity/trufflehog/v3
- https://github.com/trufflesecurity/trufflehog/security/advisories/GHSA-3r74-v83p-f4f4
- https://nvd.nist.gov/vuln/detail/CVE-2024-43379
- https://github.com/trufflesecurity/trufflehog/commit/fe5624c70923355128868cffd647b6e2cfe11443
CVE-2024-43379 · published · modified · JSON