CVE-2022-30321

CVE-2022-30321

Published · Updated

Follow this CVE+ Monitor golang-github-hashicorp-go-getter+ Monitor github.com/hashicorp/go-getter

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.1%
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0.
Affected products
n/a · n/a