9.8
CVSSv3

CVE-2023-39320

Published: 08/09/2023 Updated: 25/11/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules downloaded directly using VCS software.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

golang go

Vendor Advisories

Description<!---->A flaw was found in Golang The gomod toolchain directive, introduced in Go 121, could be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module This applies to modules downloaded using the "go" command from the module proxy and downloaded directly using ...