Skip to content
OpenAdvisories

Package · Go

github.com/kitabisa/teler-waf

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-26047

    teler-waf contains detection rule bypass via entities payload

    teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters suc…

    kitabisa teler-waf github.com/kitabisa/teler-waf Go
  • Medium 6.5
    CVE-2023-26046

    teler-waf subject to bypass of common web attack threat rule with HTML entities payload

    teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerabil…

    kitabisa teler-waf github.com/kitabisa/teler-waf Go