GHSA-h626-pv66-hhm7MediumCVSS 6.3

Terraform allows arbitrary file write during the `init` operation

Published
September 8, 2023
Last Modified
November 7, 2023

🔗 CVE IDs covered (1)

CVE-2023-4782 →

📋 Description

Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the init operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.

🎯 Affected products1

  • go/github.com/hashicorp/terraform:>= 1.0.8, < 1.5.7

🔗 References (6)