Lucene search

K
cvelistMitreCVELIST:CVE-2018-6574
HistoryFeb 07, 2018 - 9:00 p.m.

CVE-2018-6574

2018-02-0721:00:00
mitre
www.cve.org
2

6.9 Medium

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow “go get” remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.