DEBIAN-CVE-2024-45340

DEBIAN-CVE-2024-45340 PUBLISHED CVSS 8.800000190734863 HIGH

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.

Risk Scores

CVSS 3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:13	golang-1.24	0, 0

Timeline

Jan 28, 2025 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2024-45340 advisory

Open in Interactive Console →