CVE-2023-3300
2 advisories.
Go/github.com/hashicorp/nomad CVE-2023-3300: medium 5.3
Nomad Search API Leaks Information About CSI Plugins
Action: Upgrade github.com/hashicorp/nomad to 1.4.11 or later.
go get github.com/hashicorp/nomad@v1.4.11go get github.com/hashicorp/nomad@v1.5.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 1.4.11 | - |
| 1.5.0 | 1.5.7 | - |
Fixed versions
| 1.4.11 | 1.5.7 |
Sources
- osv: GHSA-v5fm-hr72-27hx
- https://nvd.nist.gov/vuln/detail/CVE-2023-3300
- https://github.com/hashicorp/nomad/commit/a8789d3872bbf1b1f420f28b0f7ad8532a41d5e3
- https://discuss.hashicorp.com/t/hcsec-2023-22-nomad-search-api-leaks-information-about-csi-plugins/56272
- https://github.com/hashicorp/nomad
- https://pkg.go.dev/vuln/GO-2024-2671
CVE-2023-3300 · published · modified · JSON
Go/github.com/hashicorp/nomad CVE-2023-3300: unknown
CSI plugin names disclosure in github.com/hashicorp/nomad
Action: Upgrade github.com/hashicorp/nomad to 1.4.11 or later.
go get github.com/hashicorp/nomad@v1.4.11go get github.com/hashicorp/nomad@v1.5.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 1.4.11 | - |
| 1.5.0 | 1.5.7 | - |
Fixed versions
| 1.4.11 | 1.5.7 |
Sources
- osv: GO-2024-2671
- https://github.com/hashicorp/nomad/commit/a8789d3872bbf1b1f420f28b0f7ad8532a41d5e3
- https://discuss.hashicorp.com/t/hcsec-2023-22-nomad-search-api-leaks-information-about-csi-plugins/56272
CVE-2023-3300 · published · modified · JSON