CVE-2024-41270

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41270
An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://gist.github.com/nyxfqq/cfae38fada582a0f576d154be1aeb1fc Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:appleboy:gorush:*:*:*:*:*:go:*:*
History

12 Aug 2024, 18:25

Type Values Removed Values Added
First Time Appleboy
Appleboy gorush
CPE cpe:2.3:a:appleboy:gorush:*:*:*:*:*:go:*:*
References () https://gist.github.com/nyxfqq/cfae38fada582a0f576d154be1aeb1fc - () https://gist.github.com/nyxfqq/cfae38fada582a0f576d154be1aeb1fc - Third Party Advisory

07 Aug 2024, 15:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1
CWE CWE-327

07 Aug 2024, 15:17

Type Values Removed Values Added
Summary
  • (es) Un problema descubierto en la función RunHTTPServer en Gorush v1.18.4 permite a los atacantes interceptar y manipular datos debido al uso de una versión obsoleta de TLS.

06 Aug 2024, 21:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-06 21:16

Updated : 2024-08-12 18:25

NVD link : CVE-2024-41270

Mitre link : CVE-2024-41270

CVE.ORG link : CVE-2024-41270

JSON object : View

Products Affected

appleboy

  • gorush
CWE
CWE-327

Use of a Broken or Risky Cryptographic Algorithm