Executive brief
GoPhish sends cleartext passwords in github.com/gophish/gophish
Affected products
- Go github.com/gophish/gophish
Junglewise Threat Intelligence
CVE-2024-55196: GO-2025-3361 - GoPhish sends cleartext passwords in github.com/gophish/gophish
CVE-2024-55196 · Severity: low · CVSS 3.1 · Published 2025-01-07
Technologies: github.com/gophish/gophish (Go). Vendors: Go.
Related threats
- Gophish denial of service via Office document upload in ApplyTemplate
- GO-2026-4455 - Gophish is vulnerable to Incorrect Access Control in github.com/gophish/gophish
- GO-2022-0987 - Gophish before 0.12.0 vulnerable to Open Redirect in github.com/gophish/gophish
- GO-2023-1982 - Gophish vulnerable to Server-Side Request Forgery in github.com/gophish/gophish
- GO-2023-1936 - Gophish XSS Vulnerability in github.com/gophish/gophish