Executive brief
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker
Affected products
- Go github.com/gravitl/netmaker
Junglewise Threat Intelligence
CVE-2023-32078: GO-2023-2023 - Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker
CVE-2023-32078 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/gravitl/netmaker (Go). Vendors: Go.
Related threats
- Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQ
- Gravitl Netmaker authentication bypass in VerifyHostToken
- GO-2026-4651 - Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys in github.com/gravitl/netmaker
- GO-2026-4654 - Netmaker has Privilege Escalation from Admin to Super-Admin via User Update in github.com/gravitl/netmaker
- GO-2026-4655 - Netmaker has Insufficient Authorization in Host Token Verification in github.com/gravitl/netmaker