GHSA-r4gv-vj59-cccm
Suggest an improvement- Source
- https://github.com/advisories/GHSA-r4gv-vj59-cccm
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-r4gv-vj59-cccm/GHSA-r4gv-vj59-cccm.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-r4gv-vj59-cccm
- Aliases
- Related
- Published
- 2021-06-23T17:27:27Z
- Modified
- 2024-08-21T15:57:46.558487Z
- Severity
-
- 6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N CVSS Calculator
- Summary
- Control character injection in console output in github.com/ipfs/go-ipfs
- Details
-
Impact
Control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action.
Patches
<!-- Has the problem been patched? What versions should users upgrade to? -->
- Patched via https://github.com/ipfs/go-ipfs/pull/7831 in v0.8.0
For more information
If you have any questions or comments about this advisory: * Open an issue in go-ipfs * Email us at security@ipfs.io
- Database specific
{ "severity": "MODERATE", "github_reviewed_at": "2021-05-21T18:06:39Z", "cwe_ids": [ "CWE-116", "CWE-150" ], "github_reviewed": true, "nvd_published_at": null }- References
Affected packages
Go / github.com/ipfs/go-ipfs
Package
- Name
- github.com/ipfs/go-ipfs
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/ipfs/go-ipfs