CVE-2023-5834

Publication date

2023-10-27 21:06:38

Family

HashiCorp

State

PUBLISHED

Description

HashiCorp Vagrants Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.