CVE-2024-52009
2 advisories.
Go/github.com/runatlantis/atlantis CVE-2024-52009: critical 9.8, EPSS 0.72%
Git credentials are exposed in Atlantis logs
Action: Upgrade github.com/runatlantis/atlantis to 0.30.0 or later.
go get github.com/runatlantis/atlantis@v0.30.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.30.0 | - |
Fixed versions
| 0.30.0 |
Sources
- osv: GHSA-gppm-hq3p-h4rp
- nvd: CVE-2024-52009
- https://github.com/runatlantis/atlantis/security/advisories/GHSA-gppm-hq3p-h4rp
- https://github.com/runatlantis/atlantis/issues/4060
- https://github.com/runatlantis/atlantis/pull/4667
- https://github.com/runatlantis/atlantis/commit/0def7d3fb74aabb75570554692b053950cde02e1
- https://argo-cd.readthedocs.io/en/stable/operator-manual/security
- https://github.com/runatlantis/atlantis
- https://github.com/runatlantis/atlantis/releases/tag/v0.30.0
- https://pkg.go.dev/vuln/GO-2024-3265
CVE-2024-52009 · published · modified · JSON
Go/github.com/runatlantis/atlantis CVE-2024-52009: critical 9.8, EPSS 0.72%
Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis
Action: Upgrade github.com/runatlantis/atlantis to 0.30.0 or later.
go get github.com/runatlantis/atlantis@v0.30.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.30.0 | - |
Fixed versions
| 0.30.0 |
Sources
- osv: GO-2024-3265
- nvd: CVE-2024-52009
- https://github.com/runatlantis/atlantis/security/advisories/GHSA-gppm-hq3p-h4rp
- https://github.com/runatlantis/atlantis/commit/0def7d3fb74aabb75570554692b053950cde02e1
- https://github.com/runatlantis/atlantis/pull/4667
- https://github.com/runatlantis/atlantis/issues/4060
- https://argo-cd.readthedocs.io/en/stable/operator-manual/security
- https://github.com/runatlantis/atlantis/releases/tag/v0.30.0
CVE-2024-52009 · published · modified · JSON