Vulnerabilities > Getgophish
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-03-22 | CVE-2022-45003 | Unspecified vulnerability in Getgophish Gophish Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus. | 7.5 |
| 2023-03-22 | CVE-2022-45004 | Cross-site Scripting vulnerability in Getgophish Gophish Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page. | 6.1 |
| 2022-09-11 | CVE-2022-25295 | Open Redirect vulnerability in Getgophish Gophish This affects the package github.com/gophish/gophish before 0.12.0. | 5.4 |
| 2020-10-28 | CVE-2020-24713 | Insufficient Session Expiration vulnerability in Getgophish Gophish Gophish through 0.10.1 does not invalidate the gophish cookie upon logout. | 7.5 |
| 2020-10-28 | CVE-2020-24712 | Cross-site Scripting vulnerability in Getgophish Gophish Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page. | 5.4 |
| 2020-10-28 | CVE-2020-24711 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Getgophish Gophish The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack | 6.5 |
| 2020-10-28 | CVE-2020-24710 | Server-Side Request Forgery (SSRF) vulnerability in Getgophish Gophish Gophish before 0.11.0 allows SSRF attacks. | 5.3 |
| 2020-10-28 | CVE-2020-24709 | Cross-site Scripting vulnerability in Getgophish Gophish Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template. | 5.4 |
| 2020-10-28 | CVE-2020-24708 | Cross-site Scripting vulnerability in Getgophish Gophish Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form. | 5.4 |
| 2020-10-28 | CVE-2020-24707 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Getgophish Gophish Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content. | 7.8 |