CVE-2023-0475 in go-getterinformation

Résumé

par MITRE • 16/02/2023

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

HashiCorp Inc.

Réserver

24/01/2023

Divulgation

16/02/2023

Modérer

accepté

Entrée

VDB-221340

CPE

prêt

EPSS

0.00454

KEV

non

Activités

très faible

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2023-0475
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-0475
CVE Detailshttps://www.cvedetails.com/cve/CVE-2023-0475/

◂ PrécédentAperçuSuivant ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!