Junglewise Threat Intelligence

CVE-2022-41925: GO-2022-1119 - Tailscale daemon is vulnerable to information disclosure via CSRF in tailscale.com

CVE-2022-41925 · Severity: low · CVSS 3 · Published 2024-08-21

Technologies: tailscale.com (Go). Vendors: Go.

Executive brief

Tailscale daemon is vulnerable to information disclosure via CSRF in tailscale.com

Affected products

Go tailscale.com
Go tailscale.com/cmd

Related threats

GO-2022-1120 - Tailscale Windows daemon is vulnerable to RCE via CSRF in tailscale.com
GO-2023-1671 - Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com