CVE-2024-6257

Опубликовано: 05 авг. 2024

Источник: msrc

CVSS3: 8.4

EPSS Низкий

Описание

HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation

EPSS

Процентиль: 19%

0.0006

Низкий

8.4 High

CVSS3

Связанные уязвимости

CVE-2024-6257

CVSS3: 8.4

ubuntu

больше 1 года назад

HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution.

CVE-2024-6257

CVSS3: 7.7

redhat

больше 1 года назад

HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution.

CVE-2024-6257

CVSS3: 8.4

nvd

больше 1 года назад

HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution.

CVE-2024-6257

CVSS3: 8.4

debian

больше 1 года назад

HashiCorp\u2019s go-getter library can be coerced into executing Git u ...

ROS-20240902-13

CVSS3: 8.4

redos

около 1 года назад

Уязвимость terraform

EPSS

Процентиль: 19%

0.0006

Низкий

8.4 High

CVSS3