HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches

🗓️ 17 Apr 2024 19:34:47Reported by HashiCorp Security TeamType

Go-getter vulnerability allows argument injection while fetching remote default git branches; fixed in version 1.7.4.

Reporter	Title	Published	Views	Family All 53
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	26 Mar 202518:21	–	ibm
BDU FSTEC	The vulnerability of the Nomad application’s Go-getter orchestrator library, related to improper handling of argument separators in commands, allows a malicious actor to format the Git URL, thereby allowing them to inject additional Git arguments into the Git command.	29 Jul 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-3817 affecting package terraform for versions less than 1.3.2-14	30 Apr 202401:31	–	cbl_mariner
Chainguard	CVE-2024-3817 vulnerabilities	17 Apr 202420:15	–	cgr
CNNVD	HashiCorp go-getter 安全漏洞	17 Apr 202400:00	–	cnnvd
CVE	CVE-2024-3817	17 Apr 202419:37	–	cve
Cvelist	CVE-2024-3817 HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches	17 Apr 202419:37	–	cvelist
Debian CVE	CVE-2024-3817	17 Apr 202419:37	–	debiancve
EUVD	EUVD-2024-1274	3 Oct 202520:07	–	euvd
Github Security Blog	HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches	17 Apr 202421:30	–	github