~ / search / GHSA-pmhg-cmjc-3875

GHSA-pmhg-cmjc-3875

Ansible Semaphore mishandles authentication

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-28609

Packages

EcosystemPackageAffectedFixed in
Go github.com/ansible-semaphore/semaphore < 2.8.89 2.8.89

Details

As written in the advisory (Markdown source, shown as plain text).

api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.

References

External links from the advisory. They lead to third-party sites.