CVE-2023-5834
1 advisory.
Go/github.com/hashicorp/vagrant CVE-2023-5834: low 3.8, EPSS 0.22%
HashiCorp Vagrant Insecure Operation on Windows Junction / Mount Point vulnerability
Action: Upgrade github.com/hashicorp/vagrant to 2.4.0 or later.
go get github.com/hashicorp/vagrant@v2.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.0 | - |
Fixed versions
| 2.4.0 |
Sources
- osv: GHSA-47xw-vw6m-w9fq
- https://nvd.nist.gov/vuln/detail/CVE-2023-5834
- https://discuss.hashicorp.com/t/hcsec-2023-31-vagrant-s-windows-installer-allowed-directory-junction-write/59568
- https://github.com/hashicorp/vagrant
CVE-2023-5834 · published · modified · JSON