PT-2018-11508
CVE-2018-12976
·
Publicado
2018-07-05
·
Atualizado
2018-09-05
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
gddo versions through 2018-06-27
Description
The issue allows an attacker to use specially crafted
go-import tags in packages being fetched to cause a directory traversal and remote code execution.Recommendations
For versions through 2018-06-27, update to a version that contains a fix for this issue to prevent directory traversal and remote code execution.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾