What is GHSA-g4x3-mfpj-f335?

GHSA-g4x3-mfpj-f335 is a security advisory published by GitHub Security Advisories with High severity. chasquid HTTP Request/Response Smuggling vulnerability

Which CVE IDs does GHSA-g4x3-mfpj-f335 cover?

GHSA-g4x3-mfpj-f335 covers the following CVE IDs: CVE-2023-52354. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g4x3-mfpj-f335?

GHSA-g4x3-mfpj-f335 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-g4x3-mfpj-f335?

GHSA-g4x3-mfpj-f335 affects 1 product, including: go/github.com/albertito/chasquid:\u003c 1.13.

GHSA-g4x3-mfpj-f335HighCVSS 7.5

chasquid HTTP Request/Response Smuggling vulnerability

Vendor

GitHub Security Advisories

Published

January 22, 2024

Last Modified

January 29, 2024

🔗 CVE IDs covered (1)

CVE-2023-52354 →

📋 Description

chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.

🎯 Affected products1

go/github.com/albertito/chasquid:< 1.13

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2023-52354
https://blitiri.com.ar/p/chasquid/relnotes/#113-2023-12-24
https://github.com/albertito/chasquid/issues/47
https://github.com/albertito/chasquid/commit/a996106eeebe81a292ecba838c7503cac7493e74
https://github.com/advisories/GHSA-g4x3-mfpj-f335