Vulnerability · Published Aug 20, 2024 · Assigned by VulDB

CVE-2024-8003Go-Tribe gotribe-admin Log routes.go InitRoutes deserialization

Low 3.5

In plain English

A low-severity unsafe deserialization in gotribe-admin from Go-Tribe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).

Severity (CVSS 3.1)3.5Low

Exploit odds (30 days)0.8%top 42.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the function InitRoutes of the file internal/app/routes/routes.go of the component Log Handler. The manipulation leads to deserialization. The patch is identified as 45ac90d6d1f82716f77dbcdf8e7309c229080e3c. It is recommended to apply a patch to fix this issue.

Affected products (as reported)

Vendor	Product	Versions
Go-Tribe	gotribe-admin	1.0

Weakness: CWE-502 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

VDB-275198 | Go-Tribe gotribe-admin Log routes.go InitRoutes deserialization vdb-entry, technical-description
VDB-275198 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #393987 | Go-Tribe gotribe-admin 1.0 Improper Output Neutralization for Logs third-party-advisory
https://github.com/Go-Tribe/gotribe-admin/issues/1 issue-tracking
https://github.com/Go-Tribe/gotribe-admin/issues/1#issuecomment-2298187923 issue-tracking
https://github.com/Go-Tribe/gotribe-admin/commit/45ac90d6d1f82716f77dbcdf8e7309c229080e3c patch