CVE-2023-32691P4MEDIUMCVSS 5.9≤ 2.11.52023-05-30
CVE-2023-32691 [MEDIUM] CWE-203 CVE-2023-32691: gost (GO Simple Tunnel) is a simple tunnel written in golang. Sensitive secrets such as passwords, t
gost (GO Simple Tunnel) is a simple tunnel written in golang. Sensitive secrets such as passwords, token and API keys should be compared only using a constant-time comparison function. Untrusted input, sourced from a HTTP header, is compared directly with a secret. Since this comparison is not secure, an attacker can mount a side-channel timing atta
nvd