← Database

CVE-2022-23773

HIGH CVSS: 7.5 Published: 2022-02-11 Modified: 2026-06-17

Description

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

Affected Platforms

Netapp Cloud Insights Telegraf AgentNetapp StoragegridGolang GoNetapp Beegfs Csi DriverNetapp Kubernetes Monitoring Operator

Weakness Type

CWE-436

References