Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HashiCorp go-getter 命令注入漏洞
Vulnerability Description
HashiCorp go-getter是HashiCorp的Go (golang) 的一个库，用于使用 URL 作为主要输入形式从各种来源下载文件或目录。 HashiCorp go-getter 2.0.2 版本及之前版本存在命令注入漏洞，该漏洞源于存在一个命令注入问题。
CVSS Information
N/A
Vulnerability Type
N/A