CVE-2020-24711

Name of the Vulnerable Software and Affected Versions Gophish versions prior to 0.11.0

Description The issue allows attackers to cause a denial of service via a clickjacking attack, specifically targeting the Reset button on the Account Settings page.

Recommendations For versions prior to 0.11.0, update to version 0.11.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Account Settings page to minimize the risk of exploitation.