CVE-2024-6257

CVSS V2 None CVSS V3 None
Description
HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution.
Overview
  • CVE ID
  • CVE-2024-6257
  • Assigner
  • HashiCorp
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-06-25T16:31:03.882Z
  • Last Modified Date
  • 2024-06-25T17:58:18.630Z
Weakness Enumerations
CWE URL
CWE-77 http://cwe.mitre.org/data/definitions/77.html
References
Reference URL Reference Tags
https://discuss.hashicorp.com/t/hcsec-2024-13-hashicorp-go-getter-vulnerable-to-code-execution-on-git-update-via-git-config-manipulation/68081
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-6257
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6257
History
Created Old Value New Value Data Type Notes
2024-06-26 19:26:09 Added to TrackCVE