Open-source package vulnerability · Go
CVE-2024-57604: MaysWind ezBookkeeping has Improper Privilege Management
criticalCVSS 3.1 9.8GHSA-mpg8-8x9c-p9gv
An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.
Published Feb 13, 2025 · Updated Mar 20, 2025
Affected packages
github.com/mayswind/ezbookkeeping
- Ecosystem
- Go
- Affected
- <= 0.7.0
- Fixed in
- No patched version yet
- Check
go list -m github.com/mayswind/ezbookkeeping
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology