VDB
ANCHORE-2024-45340
ANCHORE-2024-45340
PUBLISHED
Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Go toolchain | cmd/go | 1.24.0-0, 1.24.0-0, 1.24.0-0 |
Timeline
- Jan 28, 2025 CVE Published
- Jan 30, 2025 CVE Updated