Beveiligingsadvies

CVE-2025-8959

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-15 20:32:52

Laatst bijgewerkt 2025-08-15 20:46:06

Toegewezen door HashiCorp

CVSS-score 7.5

Status PUBLISHED

Beschrijving

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9.

← Alle CVE's bekijken Bekijk op cve.org ↗