{"action":"Upgrade github.com/ansible-semaphore/semaphore to 2.8.89 or later.","affected":[{"fixed":"2.8.89","introduced":"0"}],"component":"github.com/ansible-semaphore/semaphore","cve_ids":["CVE-2023-28609"],"ecosystem":"Go","epss":0.00873,"exploited":false,"fixed_versions":["2.8.89"],"ghsa_id":"GHSA-pmhg-cmjc-3875","id":"tcs_01M5KFHJZ6T78RG03FVS8W4QWC","modified_at":"2023-11-08T04:12:12.441846Z","published_at":"2023-03-18T21:30:23Z","references":["https://osv.dev/vulnerability/GHSA-pmhg-cmjc-3875","https://nvd.nist.gov/vuln/detail/CVE-2023-28609","https://github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1","https://github.com/ansible-semaphore/semaphore","https://github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-pmhg-cmjc-3875","url":"https://osv.dev/vulnerability/GHSA-pmhg-cmjc-3875"}],"summary":"Ansible Semaphore mishandles authentication"}