CVE-2023-4782

    Dashboard / Vulnerabilities / CVE-2023-4782

    CVE-2023-4782

    Published: 8 Sept 2023Last Modified: 12 Aug 2026

    Summary: Terraform Allows Arbitrary File Write During Init Operation

    Details: Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.

    References: https://discuss.hashicorp.com/t/hcsec-2023-27-terraform-allows-arbitrary-file-write-during-init-operation/58082, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4782.json, https://nvd.nist.gov/vuln/detail/CVE-2023-4782, https://github.com/hashicorp/terraform

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- f5e8851e5e81493a759b4e313e7d8738cc9968e2
    Fixed -ee58ac1851c8a433005df9863ed47796a9f6b5e7

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-4782 | CVE-DB