kone-net/go-chat

kone-net/go-chat

GitHubGitHub
GitHubgithub.com
Releases0
Stars1.07K
go-chat.使用Go基于WebSocket开发的web聊天应用。单聊，群聊。文字，图片，语音，视频消息，屏幕共享，剪切板图片，基于WebRTC的P2P语音通话，视频聊天。
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-7452↗
6.3 MEDIUM6.5 MEDIUM

A vulnerability was found in kone-net go-chat up to f9e58d0afa9bbdb31faf25e7739da330692c4c63. It has been declared as critical. This vulnerability affects the function GetFile of the file go-chat/api/v1/file_controller.go of the component Endpoint. The manipulation of the argument fileName leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.