vulnerability
SUSE: CVE-2022-23773: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Feb 11, 2022 | Mar 5, 2022 | Oct 26, 2022 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Feb 11, 2022
Added
Mar 5, 2022
Modified
Oct 26, 2022
Description
cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.
Solutions
suse-upgrade-go1-16suse-upgrade-go1-16-docsuse-upgrade-go1-16-racesuse-upgrade-go1-17suse-upgrade-go1-17-docsuse-upgrade-go1-17-race
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.