Description
api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/ansible-semaphore/semaphore | < 2.8.89 | 2.8.89 | GHSA-pmhg-cmjc-3875 |
Critical · 9.8
CVE-2023-28609
EUVD-2023-1070GHSA-pmhg-cmjc-3875
Ansible Semaphore mishandles authentication
Published Mar 18, 2023 · Updated Feb 26, 2025 · Assigned by mitre