Read the docs

Golf Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Golf Project records in CISA KEV

No Golf Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Golf 1 record MEDIUM

Records

1 record in Golf · all components

TI-2016-09125 CVE-2016-15005 · GHSA-q9qr-jwpw-3qvv

Cryptographically weak random number generation in github.com/dinever/golf

Priority MEDIUM 40

CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00415 Published 2022-12-27 Fixed in 0.3.0 CWE-352
Open these records in search →