The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:getgophish:gophish:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.11.0"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "6df62e85fd60f0931d3c8bfdb13b436a961bc9b6"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "v0.11.0",
"range": [
{
"fixed": "22c7b9be14241ab38e6901a88e99b45740a3561f"
}
],
"source": "REFERENCES_TAG"
}
]
}