Lucene search
Veracode Vulnerability DatabaseVERACODE:35707HistoryMay 26, 2022 - 2:56 a.m.
Path Traversal
2022-05-2602:56:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
path traversal
github.com
hashicorp.
EPSS
0.001
Percentile
48.0%
github.com/hashicorp/go-getter is vulnerable to path traversal. An attacker can access files outside the expected directory and download files or directories from various sources using malicious URLs by providing malicious inputs
References
discuss.hashicorp.com
discuss.hashicorp.com/
discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930
github.com/advisories/GHSA-fcgg-rvwg-jv58
github.com/hashicorp/go-getter/commit/38e97387488f5439616be60874979433a12edb48
github.com/hashicorp/go-getter/commit/a2ebce998f8d4105bd4b78d6c99a12803ad97a45
github.com/hashicorp/go-getter/pull/359
github.com/hashicorp/go-getter/pull/361
github.com/hashicorp/go-getter/releases
Related
ubuntucve
ubuntucve
CVE-2022-30321
2022-05-25 00:00:00
github
github
HashiCorp go-getter unsafe downloads
2022-05-26 00:01:27
cvelist
cvelist
CVE-2022-30321
2022-05-25 11:19:42
nvd
nvd
CVE-2022-30321
2022-05-25 12:15:08
cve
cve
CVE-2022-30321
2022-05-25 12:15:08
debiancve
debiancve
CVE-2022-30321
2022-05-25 12:15:08
redhatcve
redhatcve
CVE-2022-30321
2022-06-07 02:29:48
prion
prion
Path traversal
2022-05-25 12:15:00
osv
osv
CVE-2022-30323
2022-05-25 12:15:08
CVE-2022-26945
2022-05-25 12:15:08
HashiCorp go-getter unsafe downloads could lead to arbitrary host access
2022-05-26 00:01:27
redhat
redhat
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-04-24 19:15:42
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2024-01-31 19:20:21