CVE-2024-2056

Description

Artica Proxy Loopback Services Remotely Accessible Unauthenticated in github.com/gvalkov/tailon

How to fix CVE-2024-2056

No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.

• Go/github.com/gvalkov/tailon—no fix listed

Is CVE-2024-2056 being exploited?

Low — EPSS is 4.9%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2024-2056
• WEBseclists.org/fulldisclosure/2024/Mar/14
• WEBgithub.com/gvalkov/tailon#security
• WEBkorelogic.com/Resources/Advisories/KL-001-2024-004.txt