hashicorp go-getter CVE-2022-30321 is a vulnerability in HashiCorp Go Getter
Published on May 25, 2022

go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0.

NVD


Products Associated with CVE-2022-30321

Want to know whenever a new CVE is published for HashiCorp Go Getter? stack.watch will email you.

 

Exploit Probability

EPSS
1.23%
Percentile
78.87%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.