What is GHSA-8wrg-m8vm-5fvj?

GHSA-8wrg-m8vm-5fvj is a security advisory published by GitHub Security Advisories with High severity. Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server

Which CVE IDs does GHSA-8wrg-m8vm-5fvj cover?

GHSA-8wrg-m8vm-5fvj covers the following CVE IDs: CVE-2021-21403. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8wrg-m8vm-5fvj?

GHSA-8wrg-m8vm-5fvj has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-8wrg-m8vm-5fvj?

GHSA-8wrg-m8vm-5fvj affects 1 product, including: go/github.com/kongchuanhujiao/server:\u003c 1.3.21.

GHSA-8wrg-m8vm-5fvjHighCVSS 7.5

Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server

Vendor

GitHub Security Advisories

Published

February 15, 2022

Last Modified

January 29, 2023

🔗 CVE IDs covered (1)

CVE-2021-21403 →

📋 Description

Impact

Authentication Bypass by Primary Weakness (CWE-305)

Commit:

https://github.com/kongchuanhujiao/server/commit/9a125624f219e496bdf4b07b404816d5a309bdc1

ALL Users is impacted.

Patches

Yes, PLEASE UPGRADE TO v1.3.21-beta.d0ffc0a6

🎯 Affected products1

go/github.com/kongchuanhujiao/server:< 1.3.21

🔗 References (4)

https://github.com/kongchuanhujiao/server/security/advisories/GHSA-8wrg-m8vm-5fvj
https://nvd.nist.gov/vuln/detail/CVE-2021-21403
https://github.com/kongchuanhujiao/server/commit/9a125624f219e496bdf4b07b404816d5a309bdc1
https://github.com/advisories/GHSA-8wrg-m8vm-5fvj