Gophish vulnerabilities
1 known vulnerability in Gophish from Getgophish. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.6average CVSS score
Latest first
- 7.6 High severity
Gophish: Exposure of Sensitive Information to an Unauthorized Actor
Gophish <=0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly inside the rendered HTML/JavaScript of the page on every login. This makes permanent API credentials accessible to any scri