CyberSecBulletin

Go-Tribe vulnerabilities

We track 2 vulnerabilities in Go-Tribe products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2024.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Go-Tribe vulnerabilities

  • 9.8 Critical severity

    gotribe: Use of Hard-coded Credentials

    CVE-2024-8135Go-Tribe

    A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310. Affected is the function Sign of the file pkg/token/token.go. The manipulation of the argument config.key leads to hard-coded credentials.

  • 9.8 Critical severity

    gotribe-admin: Deserialization of Untrusted Data

    CVE-2024-8003Go-Tribe

    A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log Handler. The manipulation leads to deserialization. The patc