Description (CNA)
Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version `1.0.5`. The `windns_record` resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| nrkno / terraform-provider-windns | affected <= 1.0.4 |
CWE
CWE-77
References
- https://github.com/nrkno/terraform-provider-windns/security/advisories/GHSA-4vgf-2cm4-mp7c
- https://github.com/nrkno/terraform-provider-windns/commit/c76f69610c1b502f90aaed8c4f102194530b5bce
ADP enrichment
No English description supplied.
No references supplied.