CVE-2025-8959 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory…
High CVSS: 7.5

CVE-2025-8959

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9.
Vendor
Hashicorp
Product
Go-getter
CWE
CWE-59
Yayın Tarihi
2025-08-15 21:15:37
Güncelleme
2025-12-11 19:56:22
Source Identifier
security@hashicorp.com
KEV Date Added
-

Kategoriler

CWE-59 Go-getter HIGH Hashicorp 2025

Referanslar

https://discuss.hashicorp.com/t/hcsec-2025-23-hashicorp-go-getter-vulnerable-to-arbitrary-read-through-symlink-attack/76242