Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/openziti/zrok

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/openziti/zrok in go

High
3 months ago

zrok copy writes attacker-controlled WebDAV paths outside the destination root GSA_kwCzR0hTQS1jNjU2LWpjeDItN3Bxas4ABXGk

go github.com/openziti/zrok, github.com/openziti/zrok/v2
High
4 months ago

zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write GSA_kwCzR0hTQS03NG0zLTlxdm0tcnA5aM4ABVx9

go github.com/openziti/zrok/v2, github.com/openziti/zrok
Moderate
4 months ago

zrok: Broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records GSA_kwCzR0hTQS0zanBqLXYzeHItNWg2Z84ABVYw

go github.com/openziti/zrok/v2, github.com/openziti/zrok
High
4 months ago

zrok: Unauthenticated DoS via unbounded memory allocation in striped session cookie parsing GSA_kwCzR0hTQS1jcGY5LXBoMmotY2NyOc4ABVYv

go github.com/openziti/zrok/v2, github.com/openziti/zrok
Moderate
4 months ago

zrok: Reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering GSA_kwCzR0hTQS00ZnhxLTJ4M3gtNnhxeM4ABVYu

go github.com/openziti/zrok/v2, github.com/openziti/zrok

Filter by Severity

High 3 Moderate 2