CVE-2022-23773

Published: Feb 11, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

Affected (6)

Products: Golang: Go · Netapp: Beegfs Csi Driver, Cloud Insights Telegraf Agent, Kubernetes Monitoring Operator, Storagegrid

Golang

1 product

Netapp

4 products

Beegfs Csi Driver

Cloud Insights Telegraf Agent

Kubernetes Monitoring Operator

Storagegrid

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Golang Go	Before 1.16.14
Golang Go	From 1.17.0 to 1.17.7

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Netapp Beegfs Csi Driver	All versions
Netapp Cloud Insights Telegraf Agent	All versions
Netapp Kubernetes Monitoring Operator	All versions
Netapp Storagegrid	All versions