CVE-2022-29810

Description

The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter.

Affected Platforms

Weakness Type

CWE-532

References

• https://github.com/hashicorp/go-getter/commit/36b68b2f68a3ed10ee7ecbb0cb9f6b1dc5…
• https://github.com/hashicorp/go-getter/pull/348
• https://github.com/hashicorp/go-getter/releases/tag/v1.5.11
• https://github.com/hashicorp/go-getter/commit/36b68b2f68a3ed10ee7ecbb0cb9f6b1dc5…
• https://github.com/hashicorp/go-getter/pull/348
• https://github.com/hashicorp/go-getter/releases/tag/v1.5.11