| id: GO-2024-2440 |
| modules: |
| - module: github.com/buildkite/elastic-ci-stack-for-aws |
| vulnerable_at: 4.5.0+incompatible |
| - module: github.com/buildkite/elastic-ci-stack-for-aws/v5 |
| vulnerable_at: 5.22.5 |
| - module: github.com/buildkite/elastic-ci-stack-for-aws/v6 |
| versions: |
| - fixed: 6.7.1 |
| vulnerable_at: 6.7.0 |
| summary: |- |
| Buildkite Elastic CI for AWS time-of-check-time-of-use race condition |
| vulnerability in github.com/buildkite/elastic-ci-stack-for-aws |
| cves: |
| - CVE-2023-43741 |
| ghsas: |
| - GHSA-r5hg-349q-mg2q |
| references: |
| - advisory: https://github.com/advisories/GHSA-r5hg-349q-mg2q |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2023-43741 |
| - fix: https://github.com/buildkite/elastic-ci-stack-for-aws/commit/edad0b158ea10a6647bb1c84629d93f5c3d8770e |
| - web: https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0003.md |
| source: |
| id: GHSA-r5hg-349q-mg2q |
| created: 2024-06-26T16:12:24.457895-04:00 |
| review_status: UNREVIEWED |
| unexcluded: NOT_IMPORTABLE |
