1 matches found
golang: arbitrary code execution during "go get" via C compiler options
An arbitrary command execution flaw was found in the way Go's "go get" command handled gcc and clang sensitive options during the build. A remote attacker capable of hosting malicious repositories could potentially use this flaw to cause arbitrary command execution on the client side...
7.8CVSS7.6AI score0.07625EPSS
SaveExploits4References4
20