id: GO-2024-3130
modules:
    - module: github.com/coredns/coredns
      versions:
        - fixed: 1.11.0
      vulnerable_at: 1.10.1
summary: CoreDNS vulnerable to TuDoor Attacks in github.com/coredns/coredns
cves:
    - CVE-2023-28452
ghsas:
    - GHSA-hfmw-7g3m-gj6q
references:
    - advisory: https://github.com/advisories/GHSA-hfmw-7g3m-gj6q
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2023-28452
    - fix: https://github.com/coredns/coredns/commit/604a902e2c7e0317aecaa3666124079c75a31573
    - web: https://coredns.io
    - web: https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba
source:
    id: GHSA-hfmw-7g3m-gj6q
    created: 2024-09-19T14:00:44.445670534Z
review_status: UNREVIEWED