Executive brief
Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy
Affected products
- Go github.com/foxcpp/maddy
Junglewise Threat Intelligence
CVE-2023-27582: GO-2023-1630 - Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy
CVE-2023-27582 · Severity: low · CVSS 3.1 · Published 2024-08-20
Technologies: github.com/foxcpp/maddy (Go). Vendors: Go.
Related threats
- foxcpp Maddy Mail Server LDAP filter injection in auth.ldap
- GO-2022-0378 - MD5 hash support in github.com/foxcpp/maddy
- GO-2022-0374 - S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy
- GO-2022-0306 - Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy
- Use of a Key Past its Expiration Date and Insufficient Session Expiration in Maddy Mail Server