← CVE Intelligence

CVE-2024-3817

HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches PUBLISHED

Description (CNA)

HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package.

Affected (CNA)

Vendor / productVersions
HashiCorp / Shared libraryaffected 1.5.9 before 1.7.3

CWE

CWE-88

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.