TI-2025-43176 CVE-2025-70963 · GHSA-9f8m-9547-2gqm
Gophish <=0.12.1 is vulnerable to Incorrect Access Control.
Priority HIGH 66
Gophish <=0.12.1 is vulnerable to Incorrect Access Control.
Vulnerabilities
13 records
TI-2024-02053 CVE-2024-2211 · GHSA-h8r2-vw8v-933p
Cross-Site Scripting vulnerability in Gophish Admin Panel
Priority LOW 27
Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1.
TI-2022-22116 CVE-2022-45004 · GHSA-55m9-hm92-xm8j
Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.
Priority MEDIUM 60
Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.
TI-2022-22115 CVE-2022-45003 · GHSA-8gg8-wr4j-v2wr
Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.
Priority HIGH 72
Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.
TI-2022-08989 CVE-2022-25295 · GHSA-hvw3-p9px-gpc9
Open redirect in github.com/gophish/gophish
Priority LOW 26
This affects the package github.com/gophish/gophish before 0.12.0.
TI-2020-15165 CVE-2020-24707
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.
Priority LOW 37
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.
TI-2020-15171 CVE-2020-24713
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
Priority LOW 35
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
TI-2020-15169 CVE-2020-24711
The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers…
Priority LOW 32
The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack
TI-2020-15168 CVE-2020-24710 · GHSA-9c9w-9pq7-f35h
Gophish before 0.11.0 allows SSRF attacks.
Priority LOW 27
Gophish before 0.11.0 allows SSRF attacks.
TI-2020-15170 CVE-2020-24712
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.
Priority LOW 26
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.
TI-2020-15167 CVE-2020-24709
Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.
Priority LOW 25
Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.
TI-2020-15166 CVE-2020-24708
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
Priority LOW 25
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
TI-2019-12133 CVE-2019-16146 · GHSA-9h9f-9q8g-6764
Gophish through 0.8.0 allows XSS via a username.
Priority LOW 23
Gophish through 0.8.0 allows XSS via a username.