CVE-2024-41962

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-41962
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41962.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-41962
Aliases
Published
2024-08-01T16:30:57.629Z
Modified
2025-11-30T08:24:00.145050Z
Severity
  • 4.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L CVSS Calculator
Summary
Bostr Improper Authorization
Details

Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorized_keys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10.

Database specific 
{
    "cwe_ids": [
        "CWE-285"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41962.json"
}
References

Affected packages

Git / github.com/yonle/bostr

Affected ranges

Type
GIT
Repo
https://github.com/yonle/bostr
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
2a0c641133541792d2b8dc2de786d80c48c416c3

Affected versions

1.*

1.0.0

2.*

2.0.0
2.0.0-r1
2.0.1
2.0.10
2.0.2
2.0.3
2.0.4
2.0.5
2.0.5-a
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.5-1
2.1.5-3
2.1.5-4
2.1.5-5
2.1.5-6

3.*

3.0.0
3.0.1
3.0.2
3.0.2-1
3.0.2-2
3.0.2-3
3.0.2-5
3.0.3
3.0.4-1
3.0.4-2
3.0.5
3.0.6
3.0.7
3.0.7-1
3.0.8
3.0.9
3.0.9-1