CVE-2021-3115
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 6.9%
Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download).
Produtos afetados
n/a · n/aReferências
https://blog.golang.org/path-securityhttps://groups.google.com/g/golang-announce/c/mperVMGa98whttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWAYJGXWC232SG3UR3TR574E6BP3OSQQ/https://security.gentoo.org/glsa/202208-02https://security.netapp.com/advisory/ntap-20210219-0001/