ZeroHour

CVE-2018-12976

CVSS 3.0
9.8 critical
EPSS
4%p91
Published
()
Modified
Description

In Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted tags in packages being fetched by gddo to cause a directory traversal and remote code execution.

Vendors
godoc
Products
go doc dot org
Weakness
CWE-22
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.