CVE-2023-28609

Ansible Semaphore mishandles authentication in go/github.com/ansible-semaphore/semaphore

Identifiers

CVE-2023-28609, GHSA-pmhg-cmjc-3875

Package Slug

go/github.com/ansible-semaphore/semaphore

Vulnerability

Ansible Semaphore mishandles authentication

Description

api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.

Affected Versions

All versions before 2.8.89

Solution

Upgrade to version 2.8.89 or above.

Last Modified

2023-03-22

source