← Database

CVE-2024-6257

HIGH CVSS: 8.4 Published: 2024-06-25 Modified: 2026-06-17

Description

HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution.

Affected Platforms

Hashicorp Go-Getter

Weakness Type

CWE-77

References