GE
Vendor
Getgophish
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-70963 | GO Gophish Getgophish | 7.6 | Feb 6 | Gophish <=0.12.1 is vulnerable to Incorrect Access Control |
| CVE-2024-2211 | GO Gophish Getgophish | 6.1 | Mar 6 | Cross-Site Scripting vulnerability in Gophish Admin Panel |
| CVE-2022-45004 | GO Gophish Getgophish | 6.1 | Mar 22 | Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page |
| CVE-2022-45003 | GO Gophish Getgophish | 7.5 | Mar 22 | Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus |
| CVE-2022-25295 | GO Gophish Getgophish | 5.4 | Sep 11 | Open Redirect |
| CVE-2020-24713 | GO Gophish Getgophish | 7.5 | Oct 28 | Gophish through 0.10.1 does not invalidate the gophish cookie upon logout |
| CVE-2020-24712 | GO Gophish Getgophish | 5.4 | Oct 28 | Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page |
| CVE-2020-24711 | GO Gophish Getgophish | 6.5 | Oct 28 | The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack |
| CVE-2020-24710 | GO Gophish Getgophish | 5.3 | Oct 28 | Gophish before 0.11.0 allows SSRF attacks |
| CVE-2020-24709 | GO Gophish Getgophish | 5.4 | Oct 28 | Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template |
| CVE-2020-24708 | GO Gophish Getgophish | 5.4 | Oct 28 | Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form |
| CVE-2020-24707 | GO Gophish Getgophish | 7.8 | Oct 28 | Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content |
| CVE-2019-16146 | GO Gophish Getgophish | 4.8 | Sep 9 | Gophish through 0.8.0 allows XSS via a username |