CVE-2024-8005

Summary

CVE-2024-8005 is a newly disclosed critical vulnerability affecting demozx gf_cms versions 1.0 and 1.0.1. The issue lies within the init function of the file internal/logic/auth/auth.go in the JWT Authentication component. An attacker can exploit this vulnerability by manipulating the input, resulting in the exposure of hard-coded credentials. Since the exploit has been made public, remote attacks are possible. To mitigate this risk, it is strongly recommended to upgrade to version 1.0.2 and apply the patch be702ada7cb6fdabc02689d90b38139c827458a5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.