Junglewise Threat Intelligence

CVE-2024-41264: GO-2024-3026 - casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification in github.com/casdoor/casdoor

CVE-2024-41264 · Severity: low · CVSS 3.1 · Published 2024-08-06

Technologies: github.com/casdoor/casdoor (Go). Vendors: Go.

Executive brief

casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification in github.com/casdoor/casdoor

Affected products

  • Go github.com/casdoor/casdoor

Related threats