CVE-2024-41270

CRITICAL

appleboy/gorush < 1.18.4 - Use of a Broken or Risky Cryptographic Algorithm

Title source: llm
STIX 2.1

Description

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version.

References (1)

Core 1

Scores

CVSS v3 9.1
EPSS 0.0031
EPSS Percentile 22.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-327
Status published
Products (2)
appleboy/gorush < 1.18.4
appleboy/gorush 0 - 1.18.5Go
Published Aug 06, 2024
Tracked Since Feb 18, 2026