CVE-2022-45003 - Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus

HIGH

Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus

Published Mar 22, 2023

7.5

HIGH

CVSS 3.1

EPSS 1.04%

Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.

Ecosystem	Package	Introduced	Fixed
Go	github.com/gophish/gophish	0	not fixed

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-0946		Advisory
https://github.com/advisories/GHSA-8gg8-wr4j-v2wr		Advisory
https://github.com/gophish/gophish/releases/tag/v0.12.1		Release Notes
https://nvd.nist.gov/vuln/detail/CVE-2022-45003
https://pastebin.com/z5MD3z8c		ExploitThird Party Advisory