CVE-2023-34236
2 advisories.
Go/github.com/weaveworks/tf-controller CVE-2023-34236: high 8.5, EPSS 0.96%
Weave GitOps Terraform Controller Information Disclosure Vulnerability
Action: Upgrade github.com/weaveworks/tf-controller to 0.14.4 or later.
go get github.com/weaveworks/tf-controller@v0.14.4go get github.com/weaveworks/tf-controller@v0.15.0-rc.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.14.4 | - |
| 0.15.0-rc.1 | 0.15.0-rc.5 | - |
Fixed versions
| 0.14.4 | 0.15.0-rc.5 |
Sources
- osv: GHSA-6hvv-j432-23cv
- https://github.com/weaveworks/tf-controller/security/advisories/GHSA-6hvv-j432-23cv
- https://nvd.nist.gov/vuln/detail/CVE-2023-34236
- https://github.com/weaveworks/tf-controller/issues/637
- https://github.com/weaveworks/tf-controller/issues/649
- https://github.com/weaveworks/tf-controller/commit/28282bc644054e157c3b9a3d38f1f9551ce09074
- https://github.com/weaveworks/tf-controller/commit/6323b355bd7f5d2ce85d0244fe0883af3881df4e
- https://github.com/weaveworks/tf-controller/commit/9708fda28ccd0466cb0a8fd409854ab4d92f7dca
- https://github.com/weaveworks/tf-controller/commit/98a0688036e9dbcf43fa84960d9a1ef3e09a69cf
- https://github.com/weaveworks/tf-controller
CVE-2023-34236 · published · modified · JSON
Go/github.com/weaveworks/tf-controller CVE-2023-34236: unknown, EPSS 0.96%
Weave GitOps Terraform Controller Information Disclosure Vulnerability in github.com/weaveworks/tf-controller
Action: Upgrade github.com/weaveworks/tf-controller to 0.14.4 or later.
go get github.com/weaveworks/tf-controller@v0.14.4go get github.com/weaveworks/tf-controller@v0.15.0-rc.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.14.4 | - |
| 0.15.0-rc.1 | 0.15.0-rc.5 | - |
Fixed versions
| 0.14.4 | 0.15.0-rc.5 |
Sources
- osv: GO-2023-1925
- https://github.com/weaveworks/tf-controller/security/advisories/GHSA-6hvv-j432-23cv
- https://nvd.nist.gov/vuln/detail/CVE-2023-34236
- https://github.com/weaveworks/tf-controller/commit/28282bc644054e157c3b9a3d38f1f9551ce09074
- https://github.com/weaveworks/tf-controller/commit/6323b355bd7f5d2ce85d0244fe0883af3881df4e
- https://github.com/weaveworks/tf-controller/commit/9708fda28ccd0466cb0a8fd409854ab4d92f7dca
- https://github.com/weaveworks/tf-controller/commit/98a0688036e9dbcf43fa84960d9a1ef3e09a69cf
- https://github.com/weaveworks/tf-controller/issues/637
- https://github.com/weaveworks/tf-controller/issues/649
CVE-2023-34236 · published · modified · JSON