Go/github.com/hashicorp/nomad CVE-2023-3300: unknown, EPSS 0.57%
CSI plugin names disclosure in github.com/hashicorp/nomad
Action: Upgrade github.com/hashicorp/nomad to 1.4.11 or later.
go get github.com/hashicorp/nomad@v1.4.11go get github.com/hashicorp/nomad@v1.5.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 1.4.11 | - |
| 1.5.0 | 1.5.7 | - |
Fixed versions
| 1.4.11 | 1.5.7 |
Sources
- osv: GO-2024-2671
- https://github.com/hashicorp/nomad/commit/a8789d3872bbf1b1f420f28b0f7ad8532a41d5e3
- https://discuss.hashicorp.com/t/hcsec-2023-22-nomad-search-api-leaks-information-about-csi-plugins/56272
CVE-2023-3300 · published · modified · JSON