CVE-2023-4782

Publication date

2023-09-08 17:04:33

Family

HashiCorp

State

PUBLISHED

Description

Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.