Lucene search
GoogleOSV:GHSA-X24G-9W7V-VPRHHistoryMay 26, 2022 - 12:01 a.m.
HashiCorp go-getter command injection
2022-05-2600:01:27
Google
osv.dev
11
hashicorp
go-getter
command injection
vulnerability
software
EPSS
0.002
Percentile
61.4%
HashiCorp go-getter before 2.0.2 allows Command Injection.
References
discuss.hashicorp.com
discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930
github.com/hashicorp/go-getter
github.com/hashicorp/go-getter/commit/38e97387488f5439616be60874979433a12edb48
github.com/hashicorp/go-getter/commit/a2ebce998f8d4105bd4b78d6c99a12803ad97a45
github.com/hashicorp/go-getter/pull/359
github.com/hashicorp/go-getter/pull/361
nvd.nist.gov/vuln/detail/CVE-2022-26945
pkg.go.dev/vuln/GO-2022-0586
Related
redhat
redhat
osv
osv
HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion
2022-05-26 00:01:27
CVE-2022-30322
2022-05-25 12:15:08
HashiCorp go-getter unsafe downloads could lead to arbitrary host access
2022-05-26 00:01:27
veracode
veracode
cve
cve
redhatcve
redhatcve
prion
prion
Path traversal
2022-05-25 12:15:00
Code injection
2022-05-25 12:15:00
Default credentials
2022-05-25 12:15:00
ubuntucve
ubuntucve
github
github
HashiCorp go-getter unsafe downloads
2022-05-26 00:01:27
HashiCorp go-getter unsafe downloads could lead to arbitrary host access
2022-05-26 00:01:27
cvelist
cvelist
debiancve
debiancve
nvd
nvd
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-04-24 19:15:42
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2024-01-31 19:20:21