CVE-2023-4782
Fixed upstream EPSS <1%CVSS 6.3
Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.
Products: HashiCorp Terraform
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/hashicorp/terraform | 1.5.7 |