Description
An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack.
Medium · 5.3
CVE-2024-41258
EUVD-2024-38992GHSA-f6rc-73vx-29h5
An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing a…
Published Jul 31, 2024 · Updated Mar 13, 2025 · Assigned by mitre