CVE-2023-43116
1 advisory.
Go/github.com/buildkite/elastic-ci-stack-for-aws/v6 CVE-2023-43116: high 7.8, EPSS 0.33%
Buildkite Elastic CI for AWS symbolic link following vulnerability
Action: Upgrade github.com/buildkite/elastic-ci-stack-for-aws/v6 to 6.7.0 or later.
go get github.com/buildkite/elastic-ci-stack-for-aws/v6@v6.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.7.0 | - |
Fixed versions
| 6.7.0 |
Sources
- osv: GHSA-7c44-7j7v-w554
- https://nvd.nist.gov/vuln/detail/CVE-2023-43116
- https://github.com/buildkite/elastic-ci-stack-for-aws/commit/8f79882b6aa18fb8fc61f10c7047d2907b7a2f69
- https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0003.md
- https://github.com/buildkite/elastic-ci-stack-for-aws
CVE-2023-43116 · published · modified · JSON