Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/IceWhaleTech/CasaOS-UserService

4 known vulnerabilities (1 critical, 1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 critical, 1 high, 2 medium
Registry
pkg.go.dev

Advisories 4

  • CVE-2024-28232Medium 6.2

    Username Enumeration in CasaOS via bypass of CVE-2024-24766

    Affected: fixed in 0.4.8; from 0.4.7, fixed in 0.4.8.

  • CVE-2024-24766Medium 6.2

    CasaOS Username Enumeration

    Affected: from 0.4.4.3, fixed in 0.4.7; from 0.4.4-3-alpha1, fixed in 0.4.7.

  • CVE-2024-24767Critical 9.1

    CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability

    Affected: from 0.4.4-3-alpha1, fixed in 0.4.7; from 0.4.4.3, fixed in 0.4.7.

  • CasaOS-UserService allows unauthorized access to any file

    Affected: fixed in 0.4.7.