← CVE Intelligence

CVE-2024-6257

HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation PUBLISHED

Description (CNA)

HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution.

Affected (CNA)

Vendor / productVersions
HashiCorp / Shared libraryaffected 0 before 1.7.4

CWE

CWE-77

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.