CVE-2024-28232

Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page has disclosed the username enumeration vulnerability in the login page which was patched in version 0.4.7. This issue in CVE-2024-28232 has been patched in version 0.4.8 but that version has not yet been uploaded to Go's package manager.

• CWE-204

• https://github.com/IceWhaleTech/CasaOS-UserService/commit/dd927fe1c805e53790f73cfe10c7a4ded3bc5bdbPatch
• https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-hcw2-2r9c-gc6pExploit, Vendor Advisory
• https://github.com/IceWhaleTech/CasaOS-UserService/commit/dd927fe1c805e53790f73cfe10c7a4ded3bc5bdbPatch
• https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-hcw2-2r9c-gc6pExploit, Vendor Advisory

Published

Apr 1, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28226in OpenHarmony v4.0.0 and prior versions allow a remote atta…7.5
• CVE-2024-28228In JetBrains YouTrack before 2024.1.25893 creation comments …5.3
• CVE-2024-28229In JetBrains YouTrack before 2024.1.25893 user without appro…6.5
• CVE-2024-2823A vulnerability has been found in DedeCMS 5.7 and classified…4.3
• CVE-2024-28230In JetBrains YouTrack before 2024.1.25893 attaching/detachin…6.5
• CVE-2024-28231eprosima Fast DDS is a C++ implementation of the Data Distri…7.5
• CVE-2024-28233JupyterHub is an open source multi-user server for Jupyter n…6.1
• CVE-2024-28234Contao is an open source content management system. Starting…4.7
• CVE-2024-28235Contao is an open source content management system. Starting…6.5
• CVE-2024-28236Vela is a Pipeline Automation (CI/CD) framework built on Lin…6.5
• CVE-2024-28237OctoPrint provides a web interface for controlling consumer …4.8
• CVE-2024-28238Directus is a real-time API and App dashboard for managing S…2.3