45 results · Feed
-
High 7.5CVE-2018-16873 EPSS 66%
Remote command execution via "go get" with "-u" flag in cmd/go
In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is on…
-
Medium 6.8
Directory traversal via "go get" command in cmd/go
In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both '{' and '}' characters). Specifically, it is only vulnerable…
-
Unscored —CVE-2018-7187 EPSS 63%
Remote command execution via "go get" command with "-insecure" option in cmd/go
The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only checks for "://" anywhere in the string), which allows remote attackers to execute arbitrary OS commands via a crafted …
-
Unscored —CVE-2018-6574 Public exploit
Remote command execution via "go get" command with cgo in cmd/go
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.
-
Unscored —
Remote command execution via "go get" in cmd/go
Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Sub…