Path Traversal

🗓️ 26 May 2022 04:19:12Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

github.com/hashicorp/go-getter path traversal vulnerabilit

Reporter	Title	Published	Views	Family All 42
ATTACKERKB	CVE-2022-30323	25 May 202212:15	–	attackerkb
Circl	CVE-2022-30323	25 May 202216:38	–	circl
CNNVD	HashiCorp go-getter 输入验证错误漏洞	25 May 202200:00	–	cnnvd
CVE	CVE-2022-30323	25 May 202211:19	–	cve
Cvelist	CVE-2022-30323	25 May 202211:19	–	cvelist
Debian CVE	CVE-2022-30323	25 May 202211:19	–	debiancve
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	29 Apr 202502:00	–	ibm
EUVD	EUVD-2022-1942	3 Oct 202520:07	–	euvd
Github Security Blog	HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion	26 May 202200:01	–	github
NVD	CVE-2022-30323	25 May 202212:15	–	nvd

Vulners

Node

hashicorp github.com/hashicorp/go-getterRangev2.0.1–2.0.1go

OR

hashicorp github.com/hashicorp/go-getterRangev1.0.0–1.0.0go

OR

hashicorp github.com/hashicorp/go-getterMatchcmd/go-getter/v2.0.2go

Source	Link
discuss	www.discuss.hashicorp.com/
discuss	www.discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930
github	www.github.com/hashicorp/go-getter/commit/38e97387488f5439616be60874979433a12edb48
github	www.github.com/hashicorp/go-getter/pull/361
github	www.github.com/hashicorp/go-getter/pull/359
github	www.github.com/hashicorp/go-getter/commit/a2ebce998f8d4105bd4b78d6c99a12803ad97a45
github	www.github.com/advisories/GHSA-28r2-q6m8-9hpx
discuss	www.discuss.hashicorp.com/
discuss	www.discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/
github	www.github.com/hashicorp/go-getter/releases

21 Nov 2022 18:06Current

8.9High risk

Vulners AI Score8.9

CVSS 27.5

CVSS 3.18.6

EPSS0.01279

path traversal github.com/hashicorp/go-getter vulnerability attacker malicious inputs download files