Executive brief
Gophish vulnerable to Server-Side Request Forgery in github.com/gophish/gophish
Affected products
- Go github.com/gophish/gophish
Junglewise Threat Intelligence
CVE-2020-24710: GO-2023-1982 - Gophish vulnerable to Server-Side Request Forgery in github.com/gophish/gophish
CVE-2020-24710 · Severity: low · CVSS 3.1 · Published 2024-08-20
Technologies: github.com/gophish/gophish (Go). Vendors: Go.
Related threats
- Gophish denial of service via Office document upload in ApplyTemplate
- GO-2026-4455 - Gophish is vulnerable to Incorrect Access Control in github.com/gophish/gophish
- GO-2025-3361 - GoPhish sends cleartext passwords in github.com/gophish/gophish
- GO-2022-0987 - Gophish before 0.12.0 vulnerable to Open Redirect in github.com/gophish/gophish
- GO-2023-1936 - Gophish XSS Vulnerability in github.com/gophish/gophish