HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/hashicorp/nomad(Go) | 0.9.0 | 0.10.6 | N/A |
| github.com/hashicorp/nomad(Go) | 0.11.0 | 0.11.5 | N/A |
| github.com/hashicorp/nomad(Go) | 0.12.0 | 0.12.6 | N/A |
CVSS Metrics
