Junglewise Threat Intelligence

CVE-2024-43798: GO-2024-3100 - Chisel's AUTH environment variable not respected in server entrypoint in github.com/jpillora/chisel

CVE-2024-43798 · Severity: low · CVSS 3.1 · Published 2024-08-30

Vendors: Go.

Executive brief

Chisel's AUTH environment variable not respected in server entrypoint in github.com/jpillora/chisel

Affected products

Go github.com/jpillora/chisel

Related threats

Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authf