CVE-2022-30321

go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws

published May 25, 2022

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03114 · 87.7th percentile
Published
2022-05-25T11:19Z
EPSS history
Timeline
  • 25 MAY 11:19Z
    go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws
    cvelistv5