Описание
The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules downloaded directly using VCS software.
A flaw was found in Golang. The go.mod toolchain directive, introduced in Go 1.21, could be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy and downloaded directly using VCS software.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| OpenShift Service Mesh 2 | openshift-golang-builder-container | Not affected | ||
| Red Hat Enterprise Linux 8 | go-toolset:rhel8/golang | Not affected | ||
| Red Hat Enterprise Linux 8 | go-toolset:rhel8/go-toolset | Not affected | ||
| Red Hat Enterprise Linux 9 | golang | Not affected | ||
| Red Hat OpenShift Container Platform 4 | openshift-golang-builder-container | Not affected | ||
| Red Hat OpenShift Virtualization 4 | openshift-golang-builder-container | Not affected | ||
| Red Hat Storage 3 | golang | Not affected | ||
| Red Hat Storage 3 | go-toolset-7-golang | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
8.8 High
CVSS3
Связанные уязвимости
The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules downloaded directly using VCS software.
The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules downloaded directly using VCS software.
The go.mod toolchain directive, introduced in Go 1.21, can be leverage ...
The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules downloaded directly using VCS software.
Уязвимость файла go.mod языка программирования Go, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код
EPSS
8.8 High
CVSS3