CVE-2024-8003

LOW

Go-Tribe gotribe-admin <1.0 - Deserialization

Title source: llm

Description

A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log Handler. The manipulation leads to deserialization. The patch is identified as 45ac90d6d1f82716f77dbcdf8e7309c229080e3c. It is recommended to apply a patch to fix this issue.

References (6)

[Patch] https://github.com/Go-Tribe/gotribe-admin/commit/45ac90d6d1f82716f77dbcdf8e7309c229080e3c

View Patch ZIP pw:eip

[Exploit, Issue Tracking] https://github.com/Go-Tribe/gotribe-admin/issues/1

[Exploit, Issue Tracking] https://github.com/Go-Tribe/gotribe-admin/issues/1#issuecomment-2298187923

[Permissions Required, Third Party Advisory, VDB Entry] https://vuldb.com/?ctiid.275198

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.275198

[Third Party Advisory, VDB Entry] https://vuldb.com/?submit.393987

Scores

CVSS v3 3.5

EPSS 0.0047

EPSS Percentile 64.4%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-502

Status published

Affected Products (1)

gotribe/gotribe-admin

Timeline

Published Aug 20, 2024

Tracked Since Feb 18, 2026