[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPXpzlpkQyM-i829AVwnbLONoJ69kkqn2Yt3y--eHuDc":3,"g5a-risk:CVE-2023-0475":110},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":27,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":50,"references":51,"referencesCount":57,"weaknesses":58,"weaknessesCount":57,"isActivelyExploited":67,"cisaInfo":27,"otxData":27,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":105,"notableEvents":106},"CVE-2023-0475","What is CVE-2023-0475?","HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.","2023-02-16T19:15:13.867","2023-02-27T18:33:13.233",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[15,30],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"security@hashicorp.com","Secondary",{"Version":19,"VectorString":34,"AttackVector":35,"AttackComplexity":21,"PrivilegesRequired":25,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H","LOCAL",4.2,0.6,0.00454,[38,38,38,38,38,38,38],"Medium",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"hashicorp","go-getter","*","cpe:2.3:a:hashicorp:go-getter:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":48,"criteria":49,"vulnerable":4},"2.1.1","cpe:2.3:a:hashicorp:go-getter:2.1.1:*:*:*:*:*:*:*",2,[52],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fdiscuss.hashicorp.com\u002Ft\u002Fhcsec-2023-4-go-getter-vulnerable-to-denial-of-service-via-malicious-compressed-archive\u002F50125","Hashicorp",[56],"Vendor Advisory",1,[59],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-409","Improper Handling of Highly Compressed Data (Data Amplification)","The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.","An example of data amplification is a \"decompression bomb,\" a small ZIP file that can produce a large amount of data when it is decompressed.","Incomplete","Base","Simple",false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2023-0475? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-0475, a medium severity cyber security vulnerability from 2023. HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to...","CVE-2023-0475, CVE-2023-0475 vulnerability, CVE-2023-0475 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, hashicorp security, go-getter vulnerability","\u002Fwhat-is\u002Fcve-2023-0475",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":9,"dateModified":10,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-0475","Cybersecurity","CVE-2023-0475, CVE-2023-0475 vulnerability, CVE-2023-0475 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":27,"Negate":27,"Nodes":96},[97],{"Operator":98,"Negate":27,"CPEMatch":99},"OR",[100,103],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":101,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":102},"8D28DF0E-9F2C-43E8-80DE-E8F984651104","1.6.2",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":104,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"257D6714-497C-498D-97AA-EA0366238072",[],[],{"lastModified":10,"cacheTime":108,"version":109},1792439785819,"2.0",{"score":111,"band":112,"action":113,"scoredAt":114},22,"Low","Monitor","2026-10-16T06:57:12.084266+00:00"]